| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/875bb53adf3310eb/1713349493354/6e4c6bc0de84a29059a6167b2918669900fae35cadd1af5b6055a364f90fd50a/blr4VO6v8aEUspi |  104.17.3.184 | | 346 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/875bb53adf3310eb/1713349493354/6e4c6bc0de84a29059a6167b2918669900fae35cadd1af5b6055a364f90fd50a/blr4VO6v8aEUspi IP104.17.3.184:0
Size346 kB (345756 bytes) Hashfb00ec4f5f9b2f66dc0918d7fa8afabb 65faefed4327d5df9e5888e6fffac38b401304e0 3cc9ba92e4e1044fd8bcd925a669e599c1e1e604551b6e73f8aa5085337e3de2
GET /cdn-cgi/challenge-platform/h/b/pat/875bb53adf3310eb/1713349493354/6e4c6bc0de84a29059a6167b2918669900fae35cadd1af5b6055a364f90fd50a/blr4VO6v8aEUspi HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tm3b0/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Wed, 17 Apr 2024 10:24:53 GMT
content-type: text/plain; charset=UTF-8
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gbkxrwN6EopBZphZ7KRhmmQD641yt0a9bYFWjZPkP1QoAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEArny_u1wyrVg8e-Kmwxyfb2WoiwwZ2VR7QAnot_CrcySq56Rui-jZM9090K9_dW6HmpAKhOjYXLCJ7g4U74G4z6SRM_YRj-GLp3EaBxay798DZIeAtv_N7Z9CHI_0VTYiqNXVm2z1bF5VtFasnv3JDaWb4yIjBd8vMfNUM4Y4nXXIeMIyXdVK2hlzVO8VxBkXca7UzhCq51WDKlSYPWUy9ieZTdwNf5Q49DwdF9woTnuKPY26TxVlEHMcf8JJiXLUR2bbdG-Qv1fqbwQloSjintj5uXWLsZd84bMpNedRNJBV22T0PgKNeip6oalvdYbaiHiyDATsKlA6-8KJ-CUQTQIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIG5Ma8DehKKQWaYWeykYZpkA-uNcrdGvW2BVo2T5D9UKABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1FEYykHcK8H9rb_u0aFz3CmWgYloQw4YhedoEOAjJ0vy2Axa4f9UG9Dzs4uXS34_h8l6MDo2nRCvLI9lvebilMnTjCn-6D77bewqYxJKUFZW1z2jBIdu03TrETczfEg7kxgKtJE9NXGDjYJcF_iMgzgNA0PEAVM89tUYXXlFy4cUAGlqU2mPpIEOxm5ARsXC-zlLK60fkJ4cOsZRkZa6EExdhmgdwQ0fEJuSOHrBO_-zJn4hUP8q9g4yqkxW2UrfJgD07F4HaHGBEiei06sGDvH2NEPvswEl5dTGxutNrxlU7W24iYhNa2nhjlc53nNb0mKtszv-czVE9UhXyJ7-RQIDAQAB", max-age=20
server: cloudflare
cf-ray: 875bb53fceaf10eb-CPH
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1851542610:1713346877:dGd4KahMfCe0Z3Y5HLU88WldO1w8MeBH0z3VF725Eaw/875bb56e288510eb/524fa1db0df7889 | 104.17.3.184 | | 76 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1851542610:1713346877:dGd4KahMfCe0Z3Y5HLU88WldO1w8MeBH0z3VF725Eaw/875bb56e288510eb/524fa1db0df7889 IP104.17.3.184:0
File typeASCII text, with very long lines (65536), with no line terminators Hashc4647c64acff43945259dfaf3d6b7a7f 2b0d59457c14951a5f5bb14b5485738b9b28b87c 04b2f3d6c46840b67b483bfaefd25c1b414f20adb7eed1728340dd23f5c9815d
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1851542610:1713346877:dGd4KahMfCe0Z3Y5HLU88WldO1w8MeBH0z3VF725Eaw/875bb56e288510eb/524fa1db0df7889 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/jc4n8/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 524fa1db0df7889
Content-Length: 3485
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:01 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: vR0N+ycXC7oqGxR/owfpyjV+6JBNh3W6gX3BSaqAlQkoq5Eyy9w9+nI1TFjS7A6c04ZPm6bUA1ES+rktzqIsofaFcmMn6IV5DfQw5O/bNluVpYdZx3x7+I61bNY4DNOl2QVP7KveVOku3ok+wfKNT4RKWUZm77JftOpmlHzVyFzi4oAYnYZ/mvfccG+fbtqE9s6e8UHE4CZG110AB/tEr8i7RJkASRLt3WSFPF6UT2F5jrZKRk9sVFDWs5ZpHhEB36DhlyeyTa1Bq62BqBxOtk/ZJRvMoVw0a3Xq7jypZFU9j/0O2U7vgrj+QLhZ1nprDGlWZQQA8Shu/uyzwpibYhA989EvOV/RWpQn5tpZxZ3qsdXrIQmTFbTBl+MQZBN3XBIpWcEfE6h9DhkK783Obw==$sRgFd+bgAgXBTSNGPIOZWw==
server: cloudflare
cf-ray: 875bb570abaa10eb-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/images/appstore.png?v=2.0.3 |  172.64.145.88 | 200 OK | 1.3 kB |
URL GET HTTP/2cdn.salla.network/images/appstore.png?v=2.0.3 IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeRIFF (little-endian) data, Web/P image Hashfb158d49cfde2f7160bcd980e84e6000 3b72ef83e361aa6c344d4ebe6f5f4b01de154830 49352a9c3c1efaeb2f8df16b9c2ce881d4547969d381eda63846eaf9539eb211
GET /images/appstore.png?v=2.0.3 HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 10:25:07 GMT
content-type: image/webp
content-length: 1332
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=1598
content-disposition: inline; filename="appstore.webp"
content-md5: iyp9AdRTemCG+bWtlLaRfA==
etag: "8B2A7D01D4537A6086F9B5AD94B6917C"
last-modified: Sun, 26 Feb 2023 15:21:01 GMT
vary: Accept
x-oss-hash-crc64ecma: 17641185367821270181
x-oss-object-type: Normal
x-oss-request-id: 65E89687E477A23639A63380
x-oss-server-time: 17
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 3455730
expires: Thu, 17 Apr 2025 10:25:07 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
server: cloudflare
cf-ray: 875bb5981830abde-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.assets.salla.network/themes/1247874246/1.139.0/images/s-empty.png | 172.64.145.88 | 200 OK | 118 B |
URL GET HTTP/2cdn.assets.salla.network/themes/1247874246/1.139.0/images/s-empty.png IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typePNG image data, 390 x 220, 1-bit colormap, non-interlaced Hashc48aff23177844ced15c05ec5754b521 6de51183b64280fc6e577f9d4d97266b99334230 abc95f76d3063f2890fd859f8f1bd3b347adb51a9010f442b800076fb8d529bc
GET /themes/1247874246/1.139.0/images/s-empty.png HTTP/1.1
Host: cdn.assets.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 10:25:07 GMT
content-type: image/png
content-length: 118
cf-bgj: imgq:85,h2pri
cf-polished: origSize=119, status=webp_bigger
content-md5: dwXNV9XbGFto2/it3DsADw==
etag: "7705CD57D5DB185B68DBF8ADDC3B000F"
last-modified: Wed, 14 Feb 2024 09:23:14 GMT
x-oss-hash-crc64ecma: 4478996838173928230
x-oss-object-type: Normal
x-oss-request-id: 65FE6D538FF6FF37327D5C21
x-oss-server-time: 2
x-oss-storage-class: Standard
cf-cache-status: HIT
expires: Thu, 17 Apr 2025 10:25:07 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 875bb5983d1c9310-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.salla.sa/bqEja/HCqVyGUP7QoVKNWiVUrL07oj6tOAeKlzCP54R5e2.jpg | 172.64.145.121 | 200 OK | 41 kB |
URL GET HTTP/2cdn.salla.sa/bqEja/HCqVyGUP7QoVKNWiVUrL07oj6tOAeKlzCP54R5e2.jpg IP172.64.145.121:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.sa Fingerprint04:17:BA:18:A2:D7:C1:7B:BE:E4:86:1A:C6:9E:D7:DC:1A:AA:FC:49 ValidityThu, 11 Apr 2024 23:12:41 GMT - Wed, 10 Jul 2024 23:12:40 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1000x1000, Scaling: [none]x[none], YUV color, decoders should clamp Hash1f6285101d49dd0def7e666055177a84 f06c3c0a01928d427ac6e060d418642ad0f1cfb4 32abe832a5f2117539ad25dfd34014ba32de8bd37869501d60eca567f62dda8f
GET /bqEja/HCqVyGUP7QoVKNWiVUrL07oj6tOAeKlzCP54R5e2.jpg HTTP/1.1
Host: cdn.salla.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 10:25:07 GMT
content-type: image/webp
content-length: 40736
cache-control: public, max-age=31536000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=87385
content-disposition: inline; filename="HCqVyGUP7QoVKNWiVUrL07oj6tOAeKlzCP54R5e2.webp"
etag: "1209250337b20b03213c25f37c02baf3"
last-modified: Tue, 16 Jan 2024 06:37:17 GMT
vary: Accept
x-amz-id-2: Gcu39LWFpgkw3LqhVojZI4z1YpM9rGHfnQDkGGl8x6r+gtJX30h9F6bqAa8T5AZePBtXsuqzHbc=
x-amz-request-id: N0QF4CR7XJ6A6S6J
x-amz-server-side-encryption: AES256
x-amz-version-id: null
cf-cache-status: HIT
expires: Thu, 17 Apr 2025 10:25:07 GMT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875bb5983a77be51-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.salla.sa/cdn-cgi/image/fit=scale-down,width=400,height=400,onerror=redirect,format=auto/bqEja/qjLBhmWbGrKOHYQ8Wbt0DHEwS09fclLWrqCk1dHO.jpg | 172.64.145.121 | 200 OK | 7.6 kB |
URL GET HTTP/2cdn.salla.sa/cdn-cgi/image/fit=scale-down,width=400,height=400,onerror=redirect,format=auto/bqEja/qjLBhmWbGrKOHYQ8Wbt0DHEwS09fclLWrqCk1dHO.jpg IP172.64.145.121:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.sa Fingerprint04:17:BA:18:A2:D7:C1:7B:BE:E4:86:1A:C6:9E:D7:DC:1A:AA:FC:49 ValidityThu, 11 Apr 2024 23:12:41 GMT - Wed, 10 Jul 2024 23:12:40 GMT
Hash23ccbf524e3c2931048a475e1b654144 7959fddb61f6f4ddb7e1d202722b63df4e3995e0 4697cbbfe10db8d93ee4075a963a117d9f688c6d6e0170e8a699d216948365da
GET /cdn-cgi/image/fit=scale-down,width=400,height=400,onerror=redirect,format=auto/bqEja/qjLBhmWbGrKOHYQ8Wbt0DHEwS09fclLWrqCk1dHO.jpg HTTP/1.1
Host: cdn.salla.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 10:25:07 GMT
content-type: image/avif
content-length: 7639
cf-ray: 875bb5983a76be51-CPH
cf-cache-status: HIT
accept-ranges: bytes
cache-control: public, max-age=31536000
etag: "cfp1aKtspyhCk_V6RYnRkuZdCvOzoW2K7ONT99skHwDQ:9441509fe7656321c56e7bb162747dc4"
last-modified: Sun, 21 Jan 2024 07:12:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-resized: internal=ok/h q=0 n=44+169 c=0+0 v=2024.3.2 l=7639
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| hajarwater.sa/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.21.78.86 | 302 Found | 0 B |
URL GET HTTP/3hajarwater.sa/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.21.78.86:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subjecthajarwater.sa Fingerprint1B:77:C8:65:98:21:49:F4:C6:4B:DE:AE:3D:0D:D1:B1:51:E3:04:D3 ValidityTue, 26 Mar 2024 04:31:34 GMT - Mon, 24 Jun 2024 04:31:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: hajarwater.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cf_chl_3=e98ccaa0860808c; cf_chl_rc_m=1; cf_clearance=2IyeimokqewkoR2JxNcxjlfuabUTmyUiiflkL3pPuO4-1713349500-1.0.1.1-jBrykk53kL5yTXsdzVLN7diYUxh9KLiUyZDXIZhF0.ImcL87CN4X1ukufMPhLHAmVPTFTyx2RljLlbr6tRjxYA; XSRF-TOKEN=eyJpdiI6IkFmWjBFdFlaWnFyV0pOdzh4K3FFN2c9PSIsInZhbHVlIjoiT1NBR0RkOGhQZ1UvT2w5YmtKUUE1MUliNDVtZTNCNEVrelJSMWlwVnFKT0ZYakVFUEpDSHdYT05zcXdRWXpxYWJGOGFzRldvVjJMRTE5b0xoWkN6dC9MRWEwZ1VXNGlSK0oyTGIwRkc0NmFnM3FUL1dvTG5jTFdDZXBSUEJqSm0iLCJtYWMiOiI5MzE4ZjA3MzY3MDNjNGViNjNlZGVmYjFiM2NjOThiMDM2ZjhjYzc3M2NiMTBmOTljMWYwZTM0OWEzMTBjZWQ1IiwidGFnIjoiIn0%3D; __said=wcfQpGrGJefRxZD3JrW7QGqB70NnTViRCInjSJnk; __cflb=0H28ummakHfPRjxk2XCNRi63AZbK2NeNSRfHu2VeBCF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Wed, 17 Apr 2024 10:25:08 GMT
content-length: 0
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js
cache-control: max-age=300, public
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875bb59a3ad8930b-CPH
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/fonts/lib/dinnext/DINNextLTArabic-Regular.woff2 | 172.64.145.88 | 200 OK | 46 kB |
URL GET HTTP/3cdn.salla.network/fonts/lib/dinnext/DINNextLTArabic-Regular.woff2 IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46332, version 1.0 Hash772caf9156eec37b85dfa51b5deeb7ec b6503e97b3129a5d3c631015d403aa6b9f8008f7 0735844ff930989a11a95e789ea0c0b1ac1f78bc67a7ee533269924520e920b9
GET /fonts/lib/dinnext/DINNextLTArabic-Regular.woff2 HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hajarwater.sa
DNT: 1
Connection: keep-alive
Referer: https://cdn.salla.network/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: font/woff2
content-length: 46332
x-oss-request-id: 66074CBFB3DB4D31331902DA
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT
access-control-max-age: 0
etag: "772CAF9156EEC37B85DFA51B5DEEB7EC"
last-modified: Sun, 26 Feb 2023 15:20:58 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6335454659893265736
x-oss-storage-class: Standard
content-md5: dyyvkVbuw3uF36UbXe637A==
x-oss-server-time: 2
cf-cache-status: HIT
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59a29afbe58-CPH
alt-svc: h3=":443"; ma=86400
|
|
| hajarwater.sa/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 104.21.78.86 | 200 OK | 34 kB |
URL GET HTTP/3hajarwater.sa/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP104.21.78.86:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subjecthajarwater.sa Fingerprint1B:77:C8:65:98:21:49:F4:C6:4B:DE:AE:3D:0D:D1:B1:51:E3:04:D3 ValidityTue, 26 Mar 2024 04:31:34 GMT - Mon, 24 Jun 2024 04:31:33 GMT
File typegzip compressed data, from Unix Hashebfacb133f0a95540359fe406aaa1e82 296edecb89ae460e185e7524caa0a872871ff870 f600fd33bd5d7bc6d6477ae3ec801a03aeb54ea94a34e71d7c5a364eb53ea2d6
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: hajarwater.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE
DNT: 1
Connection: keep-alive
Cookie: cf_chl_3=e98ccaa0860808c; cf_chl_rc_m=1; cf_clearance=2IyeimokqewkoR2JxNcxjlfuabUTmyUiiflkL3pPuO4-1713349500-1.0.1.1-jBrykk53kL5yTXsdzVLN7diYUxh9KLiUyZDXIZhF0.ImcL87CN4X1ukufMPhLHAmVPTFTyx2RljLlbr6tRjxYA; XSRF-TOKEN=eyJpdiI6IkFmWjBFdFlaWnFyV0pOdzh4K3FFN2c9PSIsInZhbHVlIjoiT1NBR0RkOGhQZ1UvT2w5YmtKUUE1MUliNDVtZTNCNEVrelJSMWlwVnFKT0ZYakVFUEpDSHdYT05zcXdRWXpxYWJGOGFzRldvVjJMRTE5b0xoWkN6dC9MRWEwZ1VXNGlSK0oyTGIwRkc0NmFnM3FUL1dvTG5jTFdDZXBSUEJqSm0iLCJtYWMiOiI5MzE4ZjA3MzY3MDNjNGViNjNlZGVmYjFiM2NjOThiMDM2ZjhjYzc3M2NiMTBmOTljMWYwZTM0OWEzMTBjZWQ1IiwidGFnIjoiIn0%3D; __said=wcfQpGrGJefRxZD3JrW7QGqB70NnTViRCInjSJnk; __cflb=0H28ummakHfPRjxk2XCNRi63AZbK2NeNSRfHu2VeBCF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:07 GMT
content-type: application/javascript
last-modified: Mon, 15 Apr 2024 08:31:34 GMT
etag: W/"661ce5e6-4d7"
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875bb5977d08930b-CPH
x-frame-options: DENY
expires: Fri, 19 Apr 2024 10:25:07 GMT
cache-control: max-age=172800, public
content-encoding: gzip
|
|
| cdn.assets.salla.network/themes/1247874246/1.139.0/product.js | 172.64.145.88 | 200 OK | 29 kB |
URL GET HTTP/3cdn.assets.salla.network/themes/1247874246/1.139.0/product.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (52544), with no line terminators Hash2954d6742fc61713a8853a0eabf82288 671e45b6c279f7c30e0ce888e88aba04b2ed7786 abf62d51487e03006e3e10b965034e9c838642706ae38e3809deb5a54223b7bb
GET /themes/1247874246/1.139.0/product.js HTTP/1.1
Host: cdn.assets.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=52550
content-md5: DyuJXLBHJQebJOXfDzrLWg==
etag: W/"0F2B895CB04725079B24E5DF0F3ACB5A"
last-modified: Wed, 14 Feb 2024 09:23:14 GMT
x-oss-hash-crc64ecma: 2456986315881817899
x-oss-object-type: Normal
x-oss-request-id: 65F1EF508DA3F6383975450F
x-oss-server-time: 47
x-oss-storage-class: Standard
cf-cache-status: HIT
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 875bb59a2ad0929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/js/twilight/2.13.38/p-64707107.system.js | 172.64.145.88 | 200 OK | 7.2 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-64707107.system.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (21075) Hash0d96bc36b44386efffd79f6dc18d5d93 389d2439e000bacca39555844e1a56cb3a4ca63b 4954018217ff97ab887cdf9f8304a1b689b7a645e8d93df03c2080a5aecf3599
GET /js/twilight/2.13.38/p-64707107.system.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=21156
content-md5: JxPPsq+F6t6vlj9QAIK1cA==
etag: W/"2713CFB2AF85EADEAF963F500082B570"
last-modified: Mon, 15 Apr 2024 10:52:33 GMT
x-oss-hash-crc64ecma: 10966849062414754093
x-oss-object-type: Normal
x-oss-request-id: 661D0A0A8DA3F639304CD71F
x-oss-server-time: 27
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170313
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59c5811929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.assets.salla.network/themes/1247874246/1.139.0/product-card.js | 172.64.145.88 | 200 OK | 17 kB |
URL GET HTTP/3cdn.assets.salla.network/themes/1247874246/1.139.0/product-card.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (15216), with no line terminators Hash2470c0a5ef58dfffba2f46509fea43e0 8f02f28a8ab43d7ae841e2e97d0aa490b20c529b 5827fe9d7bda24d2e182a58cc8174167eda9c96e971b95bcac567e0d50fcafdd
GET /themes/1247874246/1.139.0/product-card.js HTTP/1.1
Host: cdn.assets.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
content-md5: JHDApe9Y3/+6L0ZQn+pD4A==
etag: W/"2470C0A5EF58DFFFBA2F46509FEA43E0"
last-modified: Wed, 14 Feb 2024 09:23:14 GMT
x-oss-hash-crc64ecma: 167400469071572026
x-oss-object-type: Normal
x-oss-request-id: 65FE93208DA3F636388A5E02
x-oss-server-time: 46
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 182885
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 875bb59a3ae8929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtm.js?id=GTM-TGFC6FV | 142.250.147.97 | 200 OK | 113 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-TGFC6FV IP142.250.147.97:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (50286) Size113 kB (112866 bytes) Hash0ff04ec794a0646f31d443f9e6ef0a12 d508831d79db62c0dc4663546474cb0cbc67e2b4 eacfdf4c3c64c00dd8556f21ad6db42933b559dbfa84be1450bc843a4018b2fe
GET /gtm.js?id=GTM-TGFC6FV HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 10:25:08 GMT
expires: Wed, 17 Apr 2024 10:25:08 GMT
cache-control: private, max-age=900
last-modified: Wed, 17 Apr 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 112866
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| hajarwater.sa/cdn-cgi/challenge-platform/h/b/flow/ov1/1842088084:1713346951:Qw-7hu8kR05pPw4IWeQKx8kWb8Mk_YTNfQg91DtRfrc/875bb5353b9c930b/c5daf76a6115233 | 104.21.78.86 | | 151 kB |
URL hajarwater.sa/cdn-cgi/challenge-platform/h/b/flow/ov1/1842088084:1713346951:Qw-7hu8kR05pPw4IWeQKx8kWb8Mk_YTNfQg91DtRfrc/875bb5353b9c930b/c5daf76a6115233 IP104.21.78.86:0
CertificateIssuerGoogle Trust Services LLC Subjecthajarwater.sa Fingerprint1B:77:C8:65:98:21:49:F4:C6:4B:DE:AE:3D:0D:D1:B1:51:E3:04:D3 ValidityTue, 26 Mar 2024 04:31:34 GMT - Mon, 24 Jun 2024 04:31:33 GMT
File typeASCII text, with very long lines (2332), with no line terminators Size151 kB (150748 bytes) Hash6a18f655c9324f6ff4be61e01a00dd8f 736f253fe1b80c79bcc221ef2008715565cf22d3 e5b5247e118a4b2ce91bbede8261ef30e47dd7d871e27a7b8d712aeaa582abd4
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1842088084:1713346951:Qw-7hu8kR05pPw4IWeQKx8kWb8Mk_YTNfQg91DtRfrc/875bb5353b9c930b/c5daf76a6115233 HTTP/1.1
Host: hajarwater.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE
Content-type: application/x-www-form-urlencoded
CF-Challenge: c5daf76a6115233
Content-Length: 2735
Origin: https://hajarwater.sa
DNT: 1
Connection: keep-alive
Cookie: cf_chl_3=c5daf76a6115233
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:24:58 GMT
content-type: text/html; charset=UTF-8
cf-chl-out: aPDtWebidkMI1BCZoIi5kA83ApWXxGtoVZbklf8S8g37I9tZ+8lwdLfz/EdUlKf5oUYdprV5ToLcnMAPqBmasjx9h97jjRggWnxfCe007MY=$2pbF7X2feZEE5EYyGIdtyg==
cf-chl-out-s: I+SAvgx/H8vu1ZN+1/J9qJdnzyChswVNWM6BQ52arRVW4XSqz+9nz+n36OCYhygAPzkt0519OWPvQSpMY/DsiEQd/sWBQMZkSILtmAT3UEE=$s0WnYco2khPe8eyzE4e7sw==
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875bb55c2b70930b-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtm.js?id=GTM-NCGHPJS | 142.250.147.97 | 200 OK | 81 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-NCGHPJS IP142.250.147.97:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2421) Hashb7767149eb9ac949bd56804438759dd6 c17aa51831095e3979b69a35ba00d9c68323e0d8 f44ec59eeb98e8dec216f92ad4b7884665888f151bb3f8cc4696873909b0f00f
GET /gtm.js?id=GTM-NCGHPJS HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 10:25:08 GMT
expires: Wed, 17 Apr 2024 10:25:08 GMT
cache-control: private, max-age=900
last-modified: Wed, 17 Apr 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81297
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D | 104.17.3.184 | | 30 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.17.3.184:0
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hasha542b457e2bdc17c5729bc1766fa0beb 934e66e0d190b0af6d3dcfa3de912286d7c2b221 a29c50743c7b8795a624ca3685c778b6271633eb19715ab30655eeb7b6122a01
GET /cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tm3b0/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:24:53 GMT
content-type: image/png
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 875bb53b783310eb-CPH
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.sa/customer_profiles/ZeKnF3XVpdgiAT2n92yBHWip28Wo6rqGOL8EsZzd.jpg | 172.64.145.121 | 200 OK | 26 kB |
URL GET HTTP/3cdn.salla.sa/customer_profiles/ZeKnF3XVpdgiAT2n92yBHWip28Wo6rqGOL8EsZzd.jpg IP172.64.145.121:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.sa Fingerprint04:17:BA:18:A2:D7:C1:7B:BE:E4:86:1A:C6:9E:D7:DC:1A:AA:FC:49 ValidityThu, 11 Apr 2024 23:12:41 GMT - Wed, 10 Jul 2024 23:12:40 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 734x1024, Scaling: [none]x[none], YUV color, decoders should clamp Hash45cde3b3250e6c460ad375769ffa7642 01662394b88899566c00df18df78404deb3e7e34 e911a32f458cd4624cd65c47df10e79d62baac92bfdf88f57e33a4678aeccb16
GET /customer_profiles/ZeKnF3XVpdgiAT2n92yBHWip28Wo6rqGOL8EsZzd.jpg HTTP/1.1
Host: cdn.salla.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: image/webp
content-length: 26416
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=43432
content-disposition: inline; filename="ZeKnF3XVpdgiAT2n92yBHWip28Wo6rqGOL8EsZzd.webp"
etag: "d34e2f7f56a390dedf55dbe0c2711041"
last-modified: Fri, 02 Sep 2022 10:29:51 GMT
vary: Accept
x-amz-id-2: pPk6PWWPbFKxiM6O1zc4VaM0TJqPY44YmUTMLyZTuWlNPwHRmYh3vTCYiNkthEHU1+zekzfBvR4=
x-amz-request-id: 27Y7CR24WCWEHB9W
x-amz-version-id: null
cf-cache-status: HIT
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875bb59e1f21929a-CPH
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/js/twilight/2.13.38/p-0fd2114f.system.entry.js | 172.64.145.88 | 200 OK | 116 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-0fd2114f.system.entry.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (21133) Size116 kB (115672 bytes) Hashea27d5f8d5b8d1b41ba94244bf5f3bf2 e2e20b1a057ca0e7826992618eaba219408a1f48 c937b9af86bbbaad38fcf602ee071e97aefe9e02c05c607bcc893d063b458d85
GET /js/twilight/2.13.38/p-0fd2114f.system.entry.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=22759
content-md5: VzSmBQXnUsoIVt1BJZ7AjQ==
etag: W/"5734A60505E752CA0856DD41259EC08D"
last-modified: Mon, 15 Apr 2024 10:52:28 GMT
x-oss-hash-crc64ecma: 18023432370802921633
x-oss-object-type: Normal
x-oss-request-id: 661D0A0D0BF17537327CBB08
x-oss-server-time: 7
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170084
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59e1c37929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/js/twilight/2.13.38/p-9beb6b7b.system.js | 172.64.145.88 | 200 OK | 98 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-9beb6b7b.system.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (565) Hashf05877f68d25e3adb33e12a0b5be7eb3 140575c1e21f9d2c806cabca7c57ecdbed7cd950 c99e8ce4a286732c65cd2c965e2f1103334ae64ada9fb01636f1381113c24f68
GET /js/twilight/2.13.38/p-9beb6b7b.system.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=646
content-md5: zRnP3B8zWmCEFbbFBuemTA==
etag: W/"CD19CFDC1F335A608415B6C506E7A64C"
last-modified: Mon, 15 Apr 2024 10:52:36 GMT
x-oss-hash-crc64ecma: 9235317389354271169
x-oss-object-type: Normal
x-oss-request-id: 661D0A0AB3DB4D313200579C
x-oss-server-time: 2
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170085
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59cc8e8929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hajarwater.sa/ar/languages/assets/17059063092.js | 104.21.78.86 | 200 OK | 46 kB |
URL GET HTTP/3hajarwater.sa/ar/languages/assets/17059063092.js IP104.21.78.86:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subjecthajarwater.sa Fingerprint1B:77:C8:65:98:21:49:F4:C6:4B:DE:AE:3D:0D:D1:B1:51:E3:04:D3 ValidityTue, 26 Mar 2024 04:31:34 GMT - Mon, 24 Jun 2024 04:31:33 GMT
File typeUnicode text, UTF-8 text, with very long lines (50781), with no line terminators Hash6d6ba2e93493e2d6aa9f3606381ae6f8 8969df3977a16fd28c416cd714aa542a32f0aff3 842a8e82ac1e583b52e5b36a9e66f9627a0531d030225d866e8886317e44c133
GET /ar/languages/assets/17059063092.js HTTP/1.1
Host: hajarwater.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE
DNT: 1
Connection: keep-alive
Cookie: cf_chl_3=e98ccaa0860808c; cf_chl_rc_m=1; cf_clearance=y6dX.mBlYIyeMFhNa_6sMVW5dkHVtxKfbFtKmh.BemE-1713349508-1.0.1.1-cGasae28p2T9HRlx_2ThYlAxv1M_XF_l2fJ2oA9ODdpd8O9pDYJB6bNZ.rVffM6pzuNVJKA8_B7rdP5ZnSvj.A; XSRF-TOKEN=eyJpdiI6IkFmWjBFdFlaWnFyV0pOdzh4K3FFN2c9PSIsInZhbHVlIjoiT1NBR0RkOGhQZ1UvT2w5YmtKUUE1MUliNDVtZTNCNEVrelJSMWlwVnFKT0ZYakVFUEpDSHdYT05zcXdRWXpxYWJGOGFzRldvVjJMRTE5b0xoWkN6dC9MRWEwZ1VXNGlSK0oyTGIwRkc0NmFnM3FUL1dvTG5jTFdDZXBSUEJqSm0iLCJtYWMiOiI5MzE4ZjA3MzY3MDNjNGViNjNlZGVmYjFiM2NjOThiMDM2ZjhjYzc3M2NiMTBmOTljMWYwZTM0OWEzMTBjZWQ1IiwidGFnIjoiIn0%3D; __said=wcfQpGrGJefRxZD3JrW7QGqB70NnTViRCInjSJnk; __cflb=0H28ummakHfPRjxk2XCNRi63AZbK2NeNSRfHu2VeBCF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: application/javascript
cf-bgj: minify
cache-control: public, max-age=31536000
content-security-policy: frame-ancestors https://s.salla.sa https://mahally.com/ salla.partners
cross-origin-embedder-policy: unsafe-none
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
expires: Thu, 17 Apr 2025 10:25:08 GMT
pragma: no-cache
referrer-policy: origin-when-cross-origin
s-is-local: false
s-ray: 50
s-session-type: guest
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-envoy-upstream-service-time: 105
x-frame-options: allow-from https://s.salla.sa
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
last-modified: Thu, 14 Mar 2024 03:53:59 GMT
cf-cache-status: HIT
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 875bb59daae4930b-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/js/twilight/2.13.38/p-a0dabf35.system.js | 172.64.145.88 | 200 OK | 193 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-a0dabf35.system.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (21478) Size193 kB (193052 bytes) Hash6ddbbe1d3136b757d5ba1df73539ad78 76532fdb02711691d6fb931d3328bfec8a10dbfd 2a51bb4011000fc05d24a9a517a77fb6553a9bb598ee469ec19d3d389781c8b3
GET /js/twilight/2.13.38/p-a0dabf35.system.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=24821
content-md5: BWB4ukrTtpIIyV4uDdy8SA==
etag: W/"056078BA4AD3B69208C95E2E0DDCBC48"
last-modified: Mon, 15 Apr 2024 10:52:36 GMT
x-oss-hash-crc64ecma: 16999910235837102607
x-oss-object-type: Normal
x-oss-request-id: 661D0A0A8FF6FF3833A7774F
x-oss-server-time: 10
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170312
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59cb8de929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.sift.com/s.js | 34.96.67.224 | 200 OK | 21 kB |
IP34.96.67.224:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerDigiCert Inc Subject*.sift.com FingerprintD5:90:B8:79:2D:A5:27:A0:32:84:1D:B2:22:B7:01:48:C3:D8:DE:40 ValidityMon, 05 Feb 2024 00:00:00 GMT - Sun, 19 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1029) Hash8dd54d8d08b99308e1aeb26235297660 8345af1f2c83d282914592ed4b6e27240a0bdd3e 10ec464febb7b92ed105d94da994f32989ff1d0795c0013460b5e2a7769934f2
GET /s.js HTTP/1.1
Host: cdn.sift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ABPtcPrkZ2unzituljw761M6OAYzRFRxvMudqgLepdwivg2KgsyUh3OyCdgCQCQShsQ1IdhtrRcbd9f4xA
x-goog-generation: 1710750183024543
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 20557
content-encoding: gzip
x-goog-hash: crc32c=asYZeQ==, md5=SJxRz6qrueRs3NmAX5y15w==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 20557
access-control-allow-origin: *
access-control-expose-headers: *
server: UploadServer
date: Tue, 16 Apr 2024 03:12:08 GMT
expires: Wed, 16 Apr 2025 03:12:08 GMT
cache-control: no-transform
age: 112381
last-modified: Mon, 18 Mar 2024 08:23:03 GMT
etag: "489c51cfaaabb9e46cdcd9805f9cb5e7"
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| hajarwater.sa/ar/cart/latest?source= | 104.21.78.86 | 200 OK | 206 B |
URL GET HTTP/3hajarwater.sa/ar/cart/latest?source= IP104.21.78.86:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subjecthajarwater.sa Fingerprint1B:77:C8:65:98:21:49:F4:C6:4B:DE:AE:3D:0D:D1:B1:51:E3:04:D3 ValidityTue, 26 Mar 2024 04:31:34 GMT - Mon, 24 Jun 2024 04:31:33 GMT
Hash40ff3e316d9062110b59c1d03c96fa87 43b635304f4e06fbade8ed1467891c17ebaba40f 7a464d70d51e2a383d119b74c86e9a6deb21d1b1f894f2a9decd00f597c0c0cf
GET /ar/cart/latest?source= HTTP/1.1
Host: hajarwater.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: ar
Accept-Encoding: gzip, deflate, br
Referer: https://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE
X-Requested-With: XMLHttpRequest
S-SOURCE: twilight
S-APP-VERSION: v2.0.0
S-APP-OS: browser
cache-control: no-cache
Store-Identifier: 984717185
currency: SAR
s-user-id: OfVKK8qG0WbngnAdQgUQAsjW3khEto6HHxQLmgIg
X-XSRF-TOKEN: eyJpdiI6IkFmWjBFdFlaWnFyV0pOdzh4K3FFN2c9PSIsInZhbHVlIjoiT1NBR0RkOGhQZ1UvT2w5YmtKUUE1MUliNDVtZTNCNEVrelJSMWlwVnFKT0ZYakVFUEpDSHdYT05zcXdRWXpxYWJGOGFzRldvVjJMRTE5b0xoWkN6dC9MRWEwZ1VXNGlSK0oyTGIwRkc0NmFnM3FUL1dvTG5jTFdDZXBSUEJqSm0iLCJtYWMiOiI5MzE4ZjA3MzY3MDNjNGViNjNlZGVmYjFiM2NjOThiMDM2ZjhjYzc3M2NiMTBmOTljMWYwZTM0OWEzMTBjZWQ1IiwidGFnIjoiIn0=
DNT: 1
Connection: keep-alive
Cookie: cf_chl_3=e98ccaa0860808c; cf_chl_rc_m=1; cf_clearance=y6dX.mBlYIyeMFhNa_6sMVW5dkHVtxKfbFtKmh.BemE-1713349508-1.0.1.1-cGasae28p2T9HRlx_2ThYlAxv1M_XF_l2fJ2oA9ODdpd8O9pDYJB6bNZ.rVffM6pzuNVJKA8_B7rdP5ZnSvj.A; XSRF-TOKEN=eyJpdiI6IkFmWjBFdFlaWnFyV0pOdzh4K3FFN2c9PSIsInZhbHVlIjoiT1NBR0RkOGhQZ1UvT2w5YmtKUUE1MUliNDVtZTNCNEVrelJSMWlwVnFKT0ZYakVFUEpDSHdYT05zcXdRWXpxYWJGOGFzRldvVjJMRTE5b0xoWkN6dC9MRWEwZ1VXNGlSK0oyTGIwRkc0NmFnM3FUL1dvTG5jTFdDZXBSUEJqSm0iLCJtYWMiOiI5MzE4ZjA3MzY3MDNjNGViNjNlZGVmYjFiM2NjOThiMDM2ZjhjYzc3M2NiMTBmOTljMWYwZTM0OWEzMTBjZWQ1IiwidGFnIjoiIn0%3D; __said=wcfQpGrGJefRxZD3JrW7QGqB70NnTViRCInjSJnk; __cflb=0H28ummakHfPRjxk2XCNRi63AZbK2NeNSRfHu2VeBCF; _gcl_aw=GCL.1713349509.EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE; _gcl_au=1.1.1793049493.1713349509
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: application/json
vary: Accept-Encoding,Origin
cache-control: max-age=0, must-revalidate, no-cache, no-store, private
s-session-type: guest
s-ray: 50
s-is-local: false
content-security-policy: frame-ancestors https://s.salla.sa https://mahally.com/ salla.partners
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: allow-from https://s.salla.sa
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
pragma: no-cache
expires: Sun, 02 Jan 1990 00:00:00 GMT
set-cookie: XSRF-TOKEN=eyJpdiI6ImhncHo4UFJrL0lud0tGV0h3clBDN1E9PSIsInZhbHVlIjoia1RsRnNpeVlHdmZpQzVRMzBwZXM1WlNJUEptNE1lQWFZZVNNRE9tdEtvMXVnaTNveWpaR2h3dTkyU2hSc1A4eE51TDByUnNURHAwU3V4RUdPUGt0VG5sejBXS3lSWmFaVHVZZkJXZGpIb3ZsUWplbVpUeDFTaGJaSVlBQjloa1QiLCJtYWMiOiJkZTljNGY3ZTVlN2I5ODg0Nzk0MjYyYmJlMDdmOGExMmY2ZDY4MGYyZjExNmFmOWM0NWRlOTBkNzY2NGFkMzIwIiwidGFnIjoiIn0%3D; expires=Wed, 24 Apr 2024 19:05:09 GMT; Max-Age=636000; path=/; secure
__said=wcfQpGrGJefRxZD3JrW7QGqB70NnTViRCInjSJnk; expires=Wed, 24 Apr 2024 19:05:09 GMT; Max-Age=636000; path=/; secure; httponly
x-envoy-upstream-service-time: 105
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 875bb59f9f9b930b-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-D75BZ4Y7GQ&l=dataLayer&cx=c | 142.250.147.97 | 200 OK | 109 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-D75BZ4Y7GQ&l=dataLayer&cx=c IP142.250.147.97:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (7746) Size109 kB (109275 bytes) Hash2fb3091fbac27c65e256c899c4c0e9c4 a439cb4548fd88f3c84fd257a83f92b08aac595e 6920cacaa388672cbaed967d01ec7ab20232deb0f92a16ffd7e8ee7d8a1ba0b2
GET /gtag/js?id=G-D75BZ4Y7GQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 10:25:09 GMT
expires: Wed, 17 Apr 2024 10:25:09 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 109275
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=875bb53adf3310eb | 104.17.3.184 | | 143 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=875bb53adf3310eb IP104.17.3.184:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size143 kB (142976 bytes) Hasha91c90497774e9d53582a2068957af6a 4623f66cbf444c26442f45e6c810da8bcb0c2597 381b441c27e827db674ba00d247396ffcaf94cf02b5206256e8d8aaf1040ee96
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=875bb53adf3310eb HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tm3b0/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:24:53 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 875bb53b783c10eb-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.addtoany.com/menu/page.js | 104.22.70.197 | 200 OK | 1.5 kB |
URL GET HTTP/2static.addtoany.com/menu/page.js IP104.22.70.197:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectstatic.addtoany.com Fingerprint25:DC:52:06:E9:84:6F:BC:CB:DD:82:F7:D3:4C:8F:F5:9F:49:7E:DD ValiditySat, 24 Feb 2024 06:33:02 GMT - Fri, 24 May 2024 06:33:01 GMT
File typeJavaScript source, ASCII text, with very long lines (3003), with no line terminators Hash5f984fdd1d3384220c67422c1f544a95 79c8a48b5fab47972dd69ce7dfd08cee895006b5 6e0cc78c402cbc02fdfd41cd77c5fd6ffbd8066cc07935ea8eb5f3fcc59744a3
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400, stale-while-revalidate=30, public
cf-bgj: minify
etag: W/"e346c2841e4abbb66ee259e9540abb61"
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K9SlRo17%2FEYYEY7TY5VUBa2G0luclF%2Fi9mKP9JIoxaGyg9HDTkx2QKGyXUgtsqVrmCpVypdr9QFZX1ju19YZtHnDUhdiuj6G3zHqk6iKvpR1qlQKK8BqoVYJrA9%2B5qfHIQrYZfty"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
cf-cache-status: HIT
age: 11482
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 875bb5a21db892a0-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.salla.dev/store/v1/products/2093084701/details | 104.18.33.98 | 204 No Content | 0 B |
URL OPTIONS HTTP/2api.salla.dev/store/v1/products/2093084701/details IP104.18.33.98:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.dev Fingerprint51:C7:BE:CA:34:2A:59:04:D7:35:60:D2:41:49:16:2C:62:66:53:B9 ValiditySat, 16 Mar 2024 00:43:11 GMT - Fri, 14 Jun 2024 00:43:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /store/v1/products/2093084701/details HTTP/1.1
Host: api.salla.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: cache-control,currency,s-app-os,s-app-version,s-source,s-user-id,store-identifier,x-requested-with
Referer: https://hajarwater.sa/
Origin: https://hajarwater.sa
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 17 Apr 2024 10:25:09 GMT
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-max-age: 86400
server: cloudflare
cf-ray: 875bb5a25cc58f5e-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.salla.network/js/twilight/2.13.38/p-c4a73e1a.system.js | 172.64.145.88 | 200 OK | 2.8 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-c4a73e1a.system.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (717) Hash157e4e6698eca5296e013e2ba689f60d 6ea5ef974cfb917f9f01d39288e1292e28d00db7 a4e3463559c9518bebb7e81e98d4f68480f212076822bd440975d162606e323d
GET /js/twilight/2.13.38/p-c4a73e1a.system.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=798
content-md5: Siiomn4i7LrXr3tVl7gDxQ==
etag: W/"4A28A89A7E22ECBAD7AF7B5597B803C5"
last-modified: Mon, 15 Apr 2024 10:52:38 GMT
x-oss-hash-crc64ecma: 8091737086324004248
x-oss-object-type: Normal
x-oss-request-id: 661D0A0B8FF6FF3538DA774F
x-oss-server-time: 9
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170084
expires: Thu, 17 Apr 2025 10:25:09 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59f6f12929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.salla.dev/store/v1/products/2093084701/details | 104.18.33.98 | 204 No Content | 935 B |
URL OPTIONS HTTP/2api.salla.dev/store/v1/products/2093084701/details IP104.18.33.98:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.dev Fingerprint51:C7:BE:CA:34:2A:59:04:D7:35:60:D2:41:49:16:2C:62:66:53:B9 ValiditySat, 16 Mar 2024 00:43:11 GMT - Fri, 14 Jun 2024 00:43:10 GMT
Hashb98fbade614e11f60eadc3157386a80a b751df72865902a0fae0f4d866356d3048c0e2d9 0530cfa4291b38e434c063ec2eeabf33675ccf773a17c5e3cea720bd51b8f154
GET /store/v1/products/2093084701/details HTTP/1.1
Host: api.salla.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: ar
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
S-SOURCE: twilight
S-APP-VERSION: v2.0.0
S-APP-OS: browser
cache-control: no-cache
Store-Identifier: 984717185
currency: SAR
s-user-id: OfVKK8qG0WbngnAdQgUQAsjW3khEto6HHxQLmgIg
Origin: https://hajarwater.sa
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: public, max-age=300
x-ratelimit-limit: 300
x-ratelimit-remaining: 299
s-session-type: guest
s-ray: 50
s-is-local: false
content-security-policy: frame-ancestors https://s.salla.sa https://mahally.com/ salla.partners
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: allow-from https://s.salla.sa
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
pragma: no-cache
expires: Wed, 17 Apr 2024 10:30:09 GMT
x-envoy-upstream-service-time: 123
access-control-allow-credentials: true
last-modified: Wed, 17 Apr 2024 10:25:09 GMT
cf-cache-status: MISS
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-max-age: 86400
server: cloudflare
cf-ray: 875bb5a33ead8f5e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.addtoany.com/menu/locale/ar.js | 104.22.70.197 | 200 OK | 1.1 kB |
URL GET HTTP/3static.addtoany.com/menu/locale/ar.js IP104.22.70.197:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectstatic.addtoany.com Fingerprint25:DC:52:06:E9:84:6F:BC:CB:DD:82:F7:D3:4C:8F:F5:9F:49:7E:DD ValiditySat, 24 Feb 2024 06:33:02 GMT - Fri, 24 May 2024 06:33:01 GMT
File typeASCII text, with very long lines (2301), with no line terminators Hashd4741e5197a15ec06d7fd1ac03f5e7d9 5fcc19953e428fe25ea62f987d0e2b61aa651a36 df42e402843f49735adf9bcb71b3bb843718999308cb7f1731a16df099a8123a
GET /menu/locale/ar.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400, stale-while-revalidate=30, public
cf-bgj: minify
cf-polished: origSize=2478
etag: W/"6a449afdda664ab580cda73ee4b0cb97"
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6uErysSrtPKW518dqylzFLiSSIjx3lSnFYm6y0TjszHu22dwp8oMKPa%2B0J7DNHv%2FVj4zU%2BipafoEMk%2BjxbBfJRH%2BmF5MDRioaoC7tsXMcAUYBVAC8Rx%2Fx%2FQ8AoiCZuKexEVSxacLsses01JcUopa%2B%2B9v"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
cf-cache-status: HIT
age: 6361
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 875bb5a4ec129981-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.assets.salla.network/themes/customization/984717185/1298199463.css?v=1712223172 | 172.64.145.88 | 200 OK | 3.9 kB |
URL GET HTTP/2cdn.assets.salla.network/themes/customization/984717185/1298199463.css?v=1712223172 IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeASCII text, with no line terminators Hashc4d28b8a1469c45508dd0a171927126e 3a990b49c560ed9d7f6729078b8748eb68dc9792 947eb7cdf0167bee61e98a68d9533d7623364806caa120a3b032d20e8d89c0b5
GET /themes/customization/984717185/1298199463.css?v=1712223172 HTTP/1.1
Host: cdn.assets.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1654
content-md5: IglHgb5yfOKP/hFbLQl1YQ==
last-modified: Thu, 04 Apr 2024 09:32:52 GMT
vary: Accept-Encoding
x-oss-hash-crc64ecma: 9010515895807888787
x-oss-object-type: Normal
x-oss-request-id: 660E73C68FF6FF38300A7E5E
x-oss-server-time: 3
x-oss-storage-class: Standard
cf-cache-status: HIT
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
access-control-allow-origin: *
server: cloudflare
cf-ray: 875bb5983d209310-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.addtoany.com/menu/sm.25.html | 104.22.70.197 | 200 OK | 716 B |
URL GET HTTP/2static.addtoany.com/menu/sm.25.html IP104.22.70.197:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectstatic.addtoany.com Fingerprint25:DC:52:06:E9:84:6F:BC:CB:DD:82:F7:D3:4C:8F:F5:9F:49:7E:DD ValiditySat, 24 Feb 2024 06:33:02 GMT - Fri, 24 May 2024 06:33:01 GMT
File typeHTML document, ASCII text, with very long lines (744), with no line terminators Hashc3c97893ca5c74e7504aa4ec474ea41b cdccb12d7e73682e0e807107243ede7d5e14c962 b79f65e9ffe3bad9bd9cdcffed0758430f7eb1a630c368dc173eecdeb2821f00
GET /menu/sm.25.html HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: max-age=315360000, immutable
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zug0GuV8TT18l%2FvMZH%2FJnDeJHp7wf%2B1Y662Hj9%2BLzz2bUcCdNCoPp%2Fh0DEFIQdCRWhP4K%2BoKw%2FRmNo3FmNPd%2Fwhjcq0lNYxvJsnDWqwQO4JO8fVs77yEaENmOQytJ1Ua8d%2FapSMn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 8848
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 875bb5a2cf1692a0-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.salla.network/fonts/lib/sallaicons/sallaicons.ttf?7efpwz | 172.64.145.88 | 200 OK | 272 kB |
URL GET HTTP/3cdn.salla.network/fonts/lib/sallaicons/sallaicons.ttf?7efpwz IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, sallaicons Size272 kB (272280 bytes) Hash0f2acce40c4bdc22dfc7280e67145487 9f42813562105928acbe8c334f6b62840fa6b883 c774d9352c8bb822bf44ff17d4d1f705fc28616f477c7d614697f1e72b603f2d
GET /fonts/lib/sallaicons/sallaicons.ttf?7efpwz HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hajarwater.sa
DNT: 1
Connection: keep-alive
Referer: https://cdn.salla.network/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: font/ttf
x-oss-request-id: 65F284ECCA02BA383661631F
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT
access-control-max-age: 0
etag: W/"0F2ACCE40C4BDC22DFC7280E67145487"
last-modified: Wed, 15 Mar 2023 12:36:35 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4441634929988533513
x-oss-storage-class: Standard
content-md5: DyrM5AxL3CLfxygOZxRUhw==
x-oss-server-time: 2
cf-cache-status: HIT
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59a29b5be58-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/pagead/1p-conversion/10898475421/?random=1240353810&cv=11&fst=1713349509191&bg=ffffff&guid=ON&async=1>m=45be44f0v870793280z8811065323za201&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&ref=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE%26__cf_chl_tk%3D2utmKkM6ZBWJSDu3C2mYhYX8Y021GsDL23UXaMFCu6s-1713349500-0.0.1.1-1855&label=undefined&hn=www.google.com&frm=0&tiba=%D8%A7%D8%AD%D8%B5%D9%84%20%D8%B9%D9%84%D9%89%205%20%D9%83%D8%B1%D8%A7%D8%AA%D9%8A%D9%86%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7%D8%AC%D8%B1%20%D9%85%D8%AC%D8%A7%D9%86%D8%A7%20!%20-%20%D9%85%D8%AA%D8%AC%D8%B1%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7&value=199¤cy_code=SAR&npa=1&gclaw=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&pscdl=noapi&auid=1793049493.1713349509&fdr=SA&gcp=2&sscte=1&ct_cookie_present=1&fmt=3&ct_cookie_present=false&eoid=ClgKEQjw5v2wBhDZsPyojce1-eYBEkMAdwxEkZq6Jc-5C0PV8A_MQzMiClAgK5bv2Ei_oFCuTWw1MBx-7BISlQ7zx0HC9RCs9M5bMbm6phvQwPcCBwrLI0vE8P8HAQ&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQI&eitems=ChEI8Ob9sAYQ2YOUjrn2iOirARIdAKr2w19dCUan31mDgRL9mEGhFKjKEq_v_Yle3ZE&pscrd=IhMImLmmp4TJhQMVGlgeAh1uDQu_MioIAxoRCAQQqM_U-E0ogICZyfjHhQMaEQgFEKjP1PhNKICAmcn4x4UDKAAyYwgEElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgHWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjJjCAcSWwo3RUFJYUlRb2JDaE1JdkxIUDdZTEloUU1WeXprR0FCMnVCQUNDRUFBWUFTQUFFZ0pzNmZEX0J3RRgASAdYAGCSzp_mgsiFA2oJCAIQ2AEYJCAHcPiZixK4AQEyAggCMmMICBJbCjdFQUlhSVFvYkNoTUl2TEhQN1lMSWhRTVZ5emtHQUIydUJBQ0NFQUFZQVNBQUVnSnM2ZkRfQndFGABIB1gAYJLOn-aCyIUDagkIAhDYARgkIAdw-JmLErgBATICCAIyYwgJElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgHWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjJjCAoSWwo3RUFJYUlRb2JDaE1JdkxIUDdZTEloUU1WeXprR0FCMnVCQUNDRUFBWUFTQUFFZ0pzNmZEX0J3RRgASAdYAGCSzp_mgsiFA2oJCAIQ2AEYJCAHcPiZixK4AQEyAggCMmMIAhJbCjdFQUlhSVFvYkNoTUl2TEhQN1lMSWhRTVZ5emtHQUIydUJBQ0NFQUFZQVNBQUVnSnM2ZkRfQndFGABIB1gAYJLOn-aCyIUDagkIAhDYARgkIAdw-JmLErgBATICCAIyYwgLElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgEWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjoWaHR0cHM6Ly9oYWphcndhdGVyLnNhLw | 142.250.74.164 | 302 Found | 42 B |
URL GET HTTP/3www.google.com/pagead/1p-conversion/10898475421/?random=1240353810&cv=11&fst=1713349509191&bg=ffffff&guid=ON&async=1>m=45be44f0v870793280z8811065323za201&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&ref=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE%26__cf_chl_tk%3D2utmKkM6ZBWJSDu3C2mYhYX8Y021GsDL23UXaMFCu6s-1713349500-0.0.1.1-1855&label=undefined&hn=www.google.com&frm=0&tiba=%D8%A7%D8%AD%D8%B5%D9%84%20%D8%B9%D9%84%D9%89%205%20%D9%83%D8%B1%D8%A7%D8%AA%D9%8A%D9%86%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7%D8%AC%D8%B1%20%D9%85%D8%AC%D8%A7%D9%86%D8%A7%20!%20-%20%D9%85%D8%AA%D8%AC%D8%B1%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7&value=199¤cy_code=SAR&npa=1&gclaw=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&pscdl=noapi&auid=1793049493.1713349509&fdr=SA&gcp=2&sscte=1&ct_cookie_present=1&fmt=3&ct_cookie_present=false&eoid=ClgKEQjw5v2wBhDZsPyojce1-eYBEkMAdwxEkZq6Jc-5C0PV8A_MQzMiClAgK5bv2Ei_oFCuTWw1MBx-7BISlQ7zx0HC9RCs9M5bMbm6phvQwPcCBwrLI0vE8P8HAQ&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQI&eitems=ChEI8Ob9sAYQ2YOUjrn2iOirARIdAKr2w19dCUan31mDgRL9mEGhFKjKEq_v_Yle3ZE&pscrd=IhMImLmmp4TJhQMVGlgeAh1uDQu_MioIAxoRCAQQqM_U-E0ogICZyfjHhQMaEQgFEKjP1PhNKICAmcn4x4UDKAAyYwgEElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgHWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjJjCAcSWwo3RUFJYUlRb2JDaE1JdkxIUDdZTEloUU1WeXprR0FCMnVCQUNDRUFBWUFTQUFFZ0pzNmZEX0J3RRgASAdYAGCSzp_mgsiFA2oJCAIQ2AEYJCAHcPiZixK4AQEyAggCMmMICBJbCjdFQUlhSVFvYkNoTUl2TEhQN1lMSWhRTVZ5emtHQUIydUJBQ0NFQUFZQVNBQUVnSnM2ZkRfQndFGABIB1gAYJLOn-aCyIUDagkIAhDYARgkIAdw-JmLErgBATICCAIyYwgJElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgHWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjJjCAoSWwo3RUFJYUlRb2JDaE1JdkxIUDdZTEloUU1WeXprR0FCMnVCQUNDRUFBWUFTQUFFZ0pzNmZEX0J3RRgASAdYAGCSzp_mgsiFA2oJCAIQ2AEYJCAHcPiZixK4AQEyAggCMmMIAhJbCjdFQUlhSVFvYkNoTUl2TEhQN1lMSWhRTVZ5emtHQUIydUJBQ0NFQUFZQVNBQUVnSnM2ZkRfQndFGABIB1gAYJLOn-aCyIUDagkIAhDYARgkIAdw-JmLErgBATICCAIyYwgLElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgEWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjoWaHR0cHM6Ly9oYWphcndhdGVyLnNhLw IP142.250.74.164:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/1p-conversion/10898475421/?random=1240353810&cv=11&fst=1713349509191&bg=ffffff&guid=ON&async=1>m=45be44f0v870793280z8811065323za201&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&ref=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE%26__cf_chl_tk%3D2utmKkM6ZBWJSDu3C2mYhYX8Y021GsDL23UXaMFCu6s-1713349500-0.0.1.1-1855&label=undefined&hn=www.google.com&frm=0&tiba=%D8%A7%D8%AD%D8%B5%D9%84%20%D8%B9%D9%84%D9%89%205%20%D9%83%D8%B1%D8%A7%D8%AA%D9%8A%D9%86%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7%D8%AC%D8%B1%20%D9%85%D8%AC%D8%A7%D9%86%D8%A7%20!%20-%20%D9%85%D8%AA%D8%AC%D8%B1%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7&value=199¤cy_code=SAR&npa=1&gclaw=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&pscdl=noapi&auid=1793049493.1713349509&fdr=SA&gcp=2&sscte=1&ct_cookie_present=1&fmt=3&ct_cookie_present=false&eoid=ClgKEQjw5v2wBhDZsPyojce1-eYBEkMAdwxEkZq6Jc-5C0PV8A_MQzMiClAgK5bv2Ei_oFCuTWw1MBx-7BISlQ7zx0HC9RCs9M5bMbm6phvQwPcCBwrLI0vE8P8HAQ&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQI&eitems=ChEI8Ob9sAYQ2YOUjrn2iOirARIdAKr2w19dCUan31mDgRL9mEGhFKjKEq_v_Yle3ZE&pscrd=IhMImLmmp4TJhQMVGlgeAh1uDQu_MioIAxoRCAQQqM_U-E0ogICZyfjHhQMaEQgFEKjP1PhNKICAmcn4x4UDKAAyYwgEElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgHWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjJjCAcSWwo3RUFJYUlRb2JDaE1JdkxIUDdZTEloUU1WeXprR0FCMnVCQUNDRUFBWUFTQUFFZ0pzNmZEX0J3RRgASAdYAGCSzp_mgsiFA2oJCAIQ2AEYJCAHcPiZixK4AQEyAggCMmMICBJbCjdFQUlhSVFvYkNoTUl2TEhQN1lMSWhRTVZ5emtHQUIydUJBQ0NFQUFZQVNBQUVnSnM2ZkRfQndFGABIB1gAYJLOn-aCyIUDagkIAhDYARgkIAdw-JmLErgBATICCAIyYwgJElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgHWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjJjCAoSWwo3RUFJYUlRb2JDaE1JdkxIUDdZTEloUU1WeXprR0FCMnVCQUNDRUFBWUFTQUFFZ0pzNmZEX0J3RRgASAdYAGCSzp_mgsiFA2oJCAIQ2AEYJCAHcPiZixK4AQEyAggCMmMIAhJbCjdFQUlhSVFvYkNoTUl2TEhQN1lMSWhRTVZ5emtHQUIydUJBQ0NFQUFZQVNBQUVnSnM2ZkRfQndFGABIB1gAYJLOn-aCyIUDagkIAhDYARgkIAdw-JmLErgBATICCAIyYwgLElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgEWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjoWaHR0cHM6Ly9oYWphcndhdGVyLnNhLw HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 17 Apr 2024 10:25:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/10898475421/?random=1240353810&cv=11&fst=1713349509191&bg=ffffff&guid=ON&async=1>m=45be44f0v870793280z8811065323za201&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&ref=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE%26__cf_chl_tk%3D2utmKkM6ZBWJSDu3C2mYhYX8Y021GsDL23UXaMFCu6s-1713349500-0.0.1.1-1855&label=undefined&hn=www.google.com&frm=0&tiba=%D8%A7%D8%AD%D8%B5%D9%84%20%D8%B9%D9%84%D9%89%205%20%D9%83%D8%B1%D8%A7%D8%AA%D9%8A%D9%86%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7%D8%AC%D8%B1%20%D9%85%D8%AC%D8%A7%D9%86%D8%A7%20!%20-%20%D9%85%D8%AA%D8%AC%D8%B1%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7&value=199¤cy_code=SAR&npa=1&gclaw=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&pscdl=noapi&auid=1793049493.1713349509&fdr=SA&gcp=2&sscte=1&ct_cookie_present=1&fmt=3&ct_cookie_present=false&eoid=ClgKEQjw5v2wBhDZsPyojce1-eYBEkMAdwxEkZq6Jc-5C0PV8A_MQzMiClAgK5bv2Ei_oFCuTWw1MBx-7BISlQ7zx0HC9RCs9M5bMbm6phvQwPcCBwrLI0vE8P8HAQ&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQI&eitems=ChEI8Ob9sAYQ2YOUjrn2iOirARIdAKr2w19dCUan31mDgRL9mEGhFKjKEq_v_Yle3ZE&pscrd=IhMImLmmp4TJhQMVGlgeAh1uDQu_MioIAxoRCAQQqM_U-E0ogICZyfjHhQMaEQgFEKjP1PhNKICAmcn4x4UDKAAyYwgEElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgHWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjJjCAcSWwo3RUFJYUlRb2JDaE1JdkxIUDdZTEloUU1WeXprR0FCMnVCQUNDRUFBWUFTQUFFZ0pzNmZEX0J3RRgASAdYAGCSzp_mgsiFA2oJCAIQ2AEYJCAHcPiZixK4AQEyAggCMmMICBJbCjdFQUlhSVFvYkNoTUl2TEhQN1lMSWhRTVZ5emtHQUIydUJBQ0NFQUFZQVNBQUVnSnM2ZkRfQndFGABIB1gAYJLOn-aCyIUDagkIAhDYARgkIAdw-JmLErgBATICCAIyYwgJElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgHWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjJjCAoSWwo3RUFJYUlRb2JDaE1JdkxIUDdZTEloUU1WeXprR0FCMnVCQUNDRUFBWUFTQUFFZ0pzNmZEX0J3RRgASAdYAGCSzp_mgsiFA2oJCAIQ2AEYJCAHcPiZixK4AQEyAggCMmMIAhJbCjdFQUlhSVFvYkNoTUl2TEhQN1lMSWhRTVZ5emtHQUIydUJBQ0NFQUFZQVNBQUVnSnM2ZkRfQndFGABIB1gAYJLOn-aCyIUDagkIAhDYARgkIAdw-JmLErgBATICCAIyYwgLElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgEWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjoWaHR0cHM6Ly9oYWphcndhdGVyLnNhLw&ipr=y
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdn.salla.network/fonts/sallaicons.css?v=2.0.3 | 172.64.145.88 | 200 OK | 36 kB |
URL GET HTTP/2cdn.salla.network/fonts/sallaicons.css?v=2.0.3 IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeASCII text, with very long lines (35535), with no line terminators Hash250fbffa1634520a06f8ef13708d75d3 1ab86ff0b717f9299790b9d57ea09bfc8b3daa47 964c530419b2e504bf93ab4597de6fc302e8df0129bb7443f1f219622b29d18f
GET /fonts/sallaicons.css?v=2.0.3 HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 10:25:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=35545
content-md5: mhCo9N8TdzgtsZCEKIMSew==
last-modified: Wed, 15 Mar 2023 12:41:34 GMT
vary: Accept-Encoding
x-oss-hash-crc64ecma: 11809056538034708572
x-oss-object-type: Normal
x-oss-request-id: 654F01AC1621A43138206955
x-oss-server-time: 15
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 4093350
expires: Thu, 17 Apr 2025 10:25:07 GMT
cache-control: public, max-age=31536000
server: cloudflare
cf-ray: 875bb59838d1abde-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.salla.network/js/twilight/2.13.38/p-f3d5458e.system.entry.js | 172.64.145.88 | 200 OK | 3.2 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-f3d5458e.system.entry.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3355), with no line terminators Hash6be13216640b2defd19c9ede6fe404b0 dacf4cd5dc1c9c9991a9084de5825f07a6b79660 9b8e16125b174d2aef5f609a42985da04e3cec6de2fa0bd241db1c762e04638c
GET /js/twilight/2.13.38/p-f3d5458e.system.entry.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=3292
content-md5: PFvmZgOl/+izB0aVdIulWw==
etag: W/"3C5BE66603A5FFE8B3074695748BA55B"
last-modified: Mon, 15 Apr 2024 10:52:41 GMT
x-oss-hash-crc64ecma: 4348165020538272073
x-oss-object-type: Normal
x-oss-request-id: 661D0A0F502B6E34352A1BF0
x-oss-server-time: 32
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170083
expires: Thu, 17 Apr 2025 10:25:09 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb5a14b78929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/js/swiper@8.js | 172.64.145.88 | 200 OK | 143 kB |
URL GET HTTP/3cdn.salla.network/js/swiper@8.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size143 kB (143404 bytes) Hash2926c6806c78b309d9ab2439d956f473 d8c27ad7db81db83017bfea9175850ed049e7caa ab4f673bef8772cd91e013ccf8afcdd7ed302bb5d9a8c9ad644da61707a23f89
GET /js/swiper@8.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=143706
content-md5: JP2PeWYJ15/Le25a51RDOw==
etag: W/"24FD8F796609D79FCB7B6E5AE754433B"
last-modified: Wed, 07 Jun 2023 07:36:34 GMT
x-oss-hash-crc64ecma: 6345871509132549509
x-oss-object-type: Normal
x-oss-request-id: 6552F22B502B6E3431B3FFB0
x-oss-server-time: 78
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 12553657
expires: Thu, 17 Apr 2025 10:25:09 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb5a18c05929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/js/twilight/2.13.38/p-8f7b9e36.system.js | 172.64.145.88 | 200 OK | 19 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-8f7b9e36.system.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/twilight/2.13.38/p-8f7b9e36.system.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=19266
content-md5: 2VMk5mRWk9nHus8SsEoKZg==
etag: W/"D95324E6645693D9C7BACF12B04A0A66"
last-modified: Mon, 15 Apr 2024 10:52:35 GMT
x-oss-hash-crc64ecma: 6535007600880589732
x-oss-object-type: Normal
x-oss-request-id: 661D0A0B8DA3F639379ED71F
x-oss-server-time: 15
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170084
expires: Thu, 17 Apr 2025 10:25:09 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59f6f0a929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/js/twilight/2.13.38/p-9e0b1704.system.js | 172.64.145.88 | 200 OK | 5.9 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-9e0b1704.system.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (6160), with no line terminators Hash4c747e5863c3d85b224cac894affafa7 d83e69c0294afd5a9a5d8451f0952def597544e1 5615b21385cd66272313911a8307929ca8268a23df07914ef48b965ddfbee980
GET /js/twilight/2.13.38/p-9e0b1704.system.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=5929
content-md5: T6Rdsvz7ELjV0xTBGoHl4g==
etag: W/"4FA45DB2FCFB10B8D5D314C11A81E5E2"
last-modified: Mon, 15 Apr 2024 10:52:36 GMT
x-oss-hash-crc64ecma: 4043011606689450029
x-oss-object-type: Normal
x-oss-request-id: 661D0A0B0A184B3331C1B54B
x-oss-server-time: 10
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170083
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59eede4929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/js/twilight/2.13.38/p-e64a8b4d.system.entry.js | 172.64.145.88 | 200 OK | 3.7 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-e64a8b4d.system.entry.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3812), with no line terminators Hashc4c0016a001fafe7cb59f599b31295a1 01e214b26a68617d4eda8684bb96b8181256af94 1260acd5e5b68827abb0a7c8beb797c4b03b19870424c2a08bdc6e47c7731f79
GET /js/twilight/2.13.38/p-e64a8b4d.system.entry.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=3767
content-md5: G4PcjyeiSdHqbjkxrWgFPA==
etag: W/"1B83DC8F27A249D1EA6E3931AD68053C"
last-modified: Mon, 15 Apr 2024 10:52:40 GMT
x-oss-hash-crc64ecma: 14627528929426762286
x-oss-object-type: Normal
x-oss-request-id: 661D0A0C0BF175383498BA08
x-oss-server-time: 19
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170084
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59e1c31929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/js/twilight/2.13.38/p-e0f59673.system.entry.js | 172.64.145.88 | 200 OK | 721 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-e0f59673.system.entry.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
Size721 kB (721133 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/twilight/2.13.38/p-e0f59673.system.entry.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=721498
content-md5: usYtmIVX24WPcwvyhkG69w==
etag: W/"BAC62D988557DB858F730BF28641BAF7"
last-modified: Mon, 15 Apr 2024 10:52:39 GMT
x-oss-hash-crc64ecma: 1449434052013177885
x-oss-object-type: Normal
x-oss-request-id: 661D0A0B9D2BAF3835C9910A
x-oss-server-time: 22
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170084
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59e1c42929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.sa/customer_profiles/7aXSd7MxISn21AAc0EyEvFwsm5hB5HBLB4oqAOq3.jpg | 172.64.145.121 | 200 OK | 30 kB |
URL GET HTTP/3cdn.salla.sa/customer_profiles/7aXSd7MxISn21AAc0EyEvFwsm5hB5HBLB4oqAOq3.jpg IP172.64.145.121:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.sa Fingerprint04:17:BA:18:A2:D7:C1:7B:BE:E4:86:1A:C6:9E:D7:DC:1A:AA:FC:49 ValidityThu, 11 Apr 2024 23:12:41 GMT - Wed, 10 Jul 2024 23:12:40 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1283x1444, Scaling: [none]x[none], YUV color, decoders should clamp Hash8e9acd6732f21f15bcc4ccc1a1191527 cdbfaeaa4a77749fbc739fa9772778388fbf4923 375fbb6efbc607f51cd356be211abb2c7765dc47904d333161ce802c295bdacd
GET /customer_profiles/7aXSd7MxISn21AAc0EyEvFwsm5hB5HBLB4oqAOq3.jpg HTTP/1.1
Host: cdn.salla.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: image/webp
content-length: 29508
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=78385
content-disposition: inline; filename="7aXSd7MxISn21AAc0EyEvFwsm5hB5HBLB4oqAOq3.webp"
etag: "e8b2f015029c1d57fdbc85e08ff96244"
last-modified: Tue, 05 Mar 2024 13:07:09 GMT
vary: Accept
x-amz-id-2: vseeJti+ndyh0cjGpYDBmM7NL7INw+warfdTp7asrE1++sXqSYl/qZJCG3JYmoU+hB/0V2HZ3gw=
x-amz-request-id: MRXFRDBZVB7SA7M0
x-amz-server-side-encryption: AES256
x-amz-version-id: null
cf-cache-status: HIT
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875bb59e1f1b929a-CPH
alt-svc: h3=":443"; ma=86400
|
|
| hexagon-analytics.com/images/835456.gif?bk=42e2369b33&tm=105&r=268071413&v=107&cs=UTF-8&h=hajarwater.sa&l=en-US&S=83f36a745dae8143063ce7ba13e6b615&uu=9151eedd55767c70533019ec48ea07c&t=%D8%A7%D8%AD%D8%B5%D9%84%20%D8%B9%D9%84%D9%89%205%20%D9%83%D8%B1&u=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&rf=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&nm=2&mh=63196a00446a1e285d1992cfe444aa55&np=5&ph=332b72bdb211e34e6e3c24f88d7c393b&sh=1024&sw=1280&cd=24&p=Linux%20x86_64&to=0&d=0&ce=true&dt=1&tp=0&ol=true&pr=Gecko&ps=20100101&vd=&vs=&hc=48&je=false&ss=true&ls=true&in=true&db=false&tl=false&tr=false&ts=false&tb=false&ab=false&cf=94a1dd380ead41f74cf9e46747726693&z=z | 34.102.232.42 | 200 OK | 43 B |
URL GET HTTP/2hexagon-analytics.com/images/835456.gif?bk=42e2369b33&tm=105&r=268071413&v=107&cs=UTF-8&h=hajarwater.sa&l=en-US&S=83f36a745dae8143063ce7ba13e6b615&uu=9151eedd55767c70533019ec48ea07c&t=%D8%A7%D8%AD%D8%B5%D9%84%20%D8%B9%D9%84%D9%89%205%20%D9%83%D8%B1&u=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&rf=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&nm=2&mh=63196a00446a1e285d1992cfe444aa55&np=5&ph=332b72bdb211e34e6e3c24f88d7c393b&sh=1024&sw=1280&cd=24&p=Linux%20x86_64&to=0&d=0&ce=true&dt=1&tp=0&ol=true&pr=Gecko&ps=20100101&vd=&vs=&hc=48&je=false&ss=true&ls=true&in=true&db=false&tl=false&tr=false&ts=false&tb=false&ab=false&cf=94a1dd380ead41f74cf9e46747726693&z=z IP34.102.232.42:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerDigiCert Inc Subject*.hexagon-analytics.com Fingerprint8F:7B:FF:B2:B1:66:EE:33:99:9A:39:DA:3D:65:EE:E3:16:5B:70:60 ValidityMon, 27 Nov 2023 00:00:00 GMT - Sun, 03 Nov 2024 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hash07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /images/835456.gif?bk=42e2369b33&tm=105&r=268071413&v=107&cs=UTF-8&h=hajarwater.sa&l=en-US&S=83f36a745dae8143063ce7ba13e6b615&uu=9151eedd55767c70533019ec48ea07c&t=%D8%A7%D8%AD%D8%B5%D9%84%20%D8%B9%D9%84%D9%89%205%20%D9%83%D8%B1&u=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&rf=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&nm=2&mh=63196a00446a1e285d1992cfe444aa55&np=5&ph=332b72bdb211e34e6e3c24f88d7c393b&sh=1024&sw=1280&cd=24&p=Linux%20x86_64&to=0&d=0&ce=true&dt=1&tp=0&ol=true&pr=Gecko&ps=20100101&vd=&vs=&hc=48&je=false&ss=true&ls=true&in=true&db=false&tl=false&tr=false&ts=false&tb=false&ab=false&cf=94a1dd380ead41f74cf9e46747726693&z=z HTTP/1.1
Host: hexagon-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: image/gif
x-content-type-options: nosniff
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-envoy-upstream-service-time: 1
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.salla.network/js/twilight/2.13.38/p-9a02f6fd.system.js | 172.64.145.88 | 200 OK | 181 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-9a02f6fd.system.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
Size181 kB (180747 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/twilight/2.13.38/p-9a02f6fd.system.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=180966
content-md5: YGGz+jiJxqVxo1SehEwQew==
etag: W/"6061B3FA3889C6A571A3549E844C107B"
last-modified: Mon, 15 Apr 2024 10:52:36 GMT
x-oss-hash-crc64ecma: 11323736436217803420
x-oss-object-type: Normal
x-oss-request-id: 661D0A0A0A184B313413B54B
x-oss-server-time: 15
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170085
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59cb8e2929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.assets.salla.network/themes/1247874246/1.139.0/app.css | 172.64.145.88 | 200 OK | 488 kB |
URL GET HTTP/2cdn.assets.salla.network/themes/1247874246/1.139.0/app.css IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
Size488 kB (487671 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /themes/1247874246/1.139.0/app.css HTTP/1.1
Host: cdn.assets.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 10:25:07 GMT
content-type: text/css; charset=utf-8
cf-bgj: minify
cf-polished: origSize=513754
content-md5: /grdlopvBgPn6DTwmlo7vA==
last-modified: Wed, 14 Feb 2024 09:23:13 GMT
vary: Accept-Encoding
x-oss-hash-crc64ecma: 3385733500780553981
x-oss-object-type: Normal
x-oss-request-id: 65F1C8E84EB01C35364A2B03
x-oss-server-time: 38
x-oss-storage-class: Standard
cf-cache-status: HIT
expires: Thu, 17 Apr 2025 10:25:07 GMT
cache-control: public, max-age=31536000
access-control-allow-origin: *
server: cloudflare
cf-ray: 875bb5983d129310-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE | 104.21.78.86 | 200 OK | 52 kB |
URL User Request POST HTTP/3hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE IP104.21.78.86:443
CertificateIssuerGoogle Trust Services LLC Subjecthajarwater.sa Fingerprint1B:77:C8:65:98:21:49:F4:C6:4B:DE:AE:3D:0D:D1:B1:51:E3:04:D3 ValidityTue, 26 Mar 2024 04:31:34 GMT - Mon, 24 Jun 2024 04:31:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE HTTP/1.1
Host: hajarwater.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&__cf_chl_tk=2utmKkM6ZBWJSDu3C2mYhYX8Y021GsDL23UXaMFCu6s-1713349500-0.0.1.1-1855
Content-Type: application/x-www-form-urlencoded
Content-Length: 4326
Origin: https://hajarwater.sa
DNT: 1
Connection: keep-alive
Cookie: cf_chl_3=e98ccaa0860808c; cf_chl_rc_m=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:07 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding,Origin
cache-control: max-age=0, must-revalidate, no-cache, no-store, private
s-session-type: guest
s-ray: 50
s-is-local: false
content-security-policy: frame-ancestors https://s.salla.sa https://mahally.com/ salla.partners
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: allow-from https://s.salla.sa
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
pragma: no-cache
expires: Sun, 02 Jan 1990 00:00:00 GMT
x-envoy-upstream-service-time: 483
cf-cache-status: DYNAMIC
set-cookie: cf_chl_3=; path=/; expires=Thu, Jan 01 1970 00:00:00 UTC; domain=.hajarwater.sa; Secure
cf_chl_rc_m=; path=/; expires=Thu, Jan 01 1970 00:00:00 UTC; domain=.hajarwater.sa; Secure
cf_clearance=2IyeimokqewkoR2JxNcxjlfuabUTmyUiiflkL3pPuO4-1713349500-1.0.1.1-jBrykk53kL5yTXsdzVLN7diYUxh9KLiUyZDXIZhF0.ImcL87CN4X1ukufMPhLHAmVPTFTyx2RljLlbr6tRjxYA; path=/; expires=Thu, 17-Apr-25 10:25:06 GMT; domain=.hajarwater.sa; HttpOnly; Secure; SameSite=None
XSRF-TOKEN=eyJpdiI6IkFmWjBFdFlaWnFyV0pOdzh4K3FFN2c9PSIsInZhbHVlIjoiT1NBR0RkOGhQZ1UvT2w5YmtKUUE1MUliNDVtZTNCNEVrelJSMWlwVnFKT0ZYakVFUEpDSHdYT05zcXdRWXpxYWJGOGFzRldvVjJMRTE5b0xoWkN6dC9MRWEwZ1VXNGlSK0oyTGIwRkc0NmFnM3FUL1dvTG5jTFdDZXBSUEJqSm0iLCJtYWMiOiI5MzE4ZjA3MzY3MDNjNGViNjNlZGVmYjFiM2NjOThiMDM2ZjhjYzc3M2NiMTBmOTljMWYwZTM0OWEzMTBjZWQ1IiwidGFnIjoiIn0%3D; expires=Wed, 24 Apr 2024 19:05:07 GMT; Max-Age=636000; path=/; secure
__said=wcfQpGrGJefRxZD3JrW7QGqB70NnTViRCInjSJnk; expires=Wed, 24 Apr 2024 19:05:07 GMT; Max-Age=636000; path=/; secure; httponly
__cflb=0H28ummakHfPRjxk2XCNRi63AZbK2NeNSRfHu2VeBCF; SameSite=None; Secure; path=/; expires=Wed, 17-Apr-24 11:25:07 GMT; HttpOnly
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 875bb5928960930b-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hajarwater.sa/cdn-cgi/challenge-platform/h/b/jsd/r/875bb5928960930b | 104.21.78.86 | 200 OK | 0 B |
URL POST HTTP/3hajarwater.sa/cdn-cgi/challenge-platform/h/b/jsd/r/875bb5928960930b IP104.21.78.86:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subjecthajarwater.sa Fingerprint1B:77:C8:65:98:21:49:F4:C6:4B:DE:AE:3D:0D:D1:B1:51:E3:04:D3 ValidityTue, 26 Mar 2024 04:31:34 GMT - Mon, 24 Jun 2024 04:31:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/875bb5928960930b HTTP/1.1
Host: hajarwater.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12315
Origin: https://hajarwater.sa
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE
Cookie: cf_chl_3=e98ccaa0860808c; cf_chl_rc_m=1; cf_clearance=2IyeimokqewkoR2JxNcxjlfuabUTmyUiiflkL3pPuO4-1713349500-1.0.1.1-jBrykk53kL5yTXsdzVLN7diYUxh9KLiUyZDXIZhF0.ImcL87CN4X1ukufMPhLHAmVPTFTyx2RljLlbr6tRjxYA; XSRF-TOKEN=eyJpdiI6IkFmWjBFdFlaWnFyV0pOdzh4K3FFN2c9PSIsInZhbHVlIjoiT1NBR0RkOGhQZ1UvT2w5YmtKUUE1MUliNDVtZTNCNEVrelJSMWlwVnFKT0ZYakVFUEpDSHdYT05zcXdRWXpxYWJGOGFzRldvVjJMRTE5b0xoWkN6dC9MRWEwZ1VXNGlSK0oyTGIwRkc0NmFnM3FUL1dvTG5jTFdDZXBSUEJqSm0iLCJtYWMiOiI5MzE4ZjA3MzY3MDNjNGViNjNlZGVmYjFiM2NjOThiMDM2ZjhjYzc3M2NiMTBmOTljMWYwZTM0OWEzMTBjZWQ1IiwidGFnIjoiIn0%3D; __said=wcfQpGrGJefRxZD3JrW7QGqB70NnTViRCInjSJnk; __cflb=0H28ummakHfPRjxk2XCNRi63AZbK2NeNSRfHu2VeBCF
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=y6dX.mBlYIyeMFhNa_6sMVW5dkHVtxKfbFtKmh.BemE-1713349508-1.0.1.1-cGasae28p2T9HRlx_2ThYlAxv1M_XF_l2fJ2oA9ODdpd8O9pDYJB6bNZ.rVffM6pzuNVJKA8_B7rdP5ZnSvj.A; path=/; expires=Thu, 17-Apr-25 10:25:08 GMT; domain=.hajarwater.sa; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875bb59bdea2930b-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 | 104.16.80.73 | 200 OK | 20 kB |
URL GET HTTP/2static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 IP104.16.80.73:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subjectcloudflareinsights.com Fingerprint73:92:5A:16:97:55:FC:A5:32:7C:F3:9D:0C:84:EF:F3:2F:AA:B5:00 ValiditySun, 10 Mar 2024 02:33:42 GMT - Sat, 08 Jun 2024 02:33:41 GMT
File typeJavaScript source, ASCII text, with very long lines (19986), with no line terminators Hashdd1d068fdb5fe90b6c05a5b3940e088c 0d96f9df8772633a9df4c81cf323a4ef8998ba59 6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101
GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hajarwater.sa
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 10:25:07 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.10.0"
last-modified: Mon, 15 Apr 2024 22:09:58 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb5977c8fbe42-CPH
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.salla.network/js/twilight/2.13.38/p-29e5d2bf.system.js | 172.64.145.88 | 200 OK | 3.9 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-29e5d2bf.system.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3961), with no line terminators Hash59788f1a5e1b0058e338bfeebdbb8e4d 7cd74c1d3d7ca05276bafa7e5f476f96695ecb02 350f7a9a15e76295651286c0e4c267bb0e1890c511b0e40ce53d4a8c04cc6245
GET /js/twilight/2.13.38/p-29e5d2bf.system.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=3966
content-md5: dG0eMsJmi3QiPiBIz8+WMQ==
etag: W/"746D1E32C2668B74223E2048CFCF9631"
last-modified: Mon, 15 Apr 2024 10:52:30 GMT
x-oss-hash-crc64ecma: 10614086266342607030
x-oss-object-type: Normal
x-oss-request-id: 661D0A0BB3DB4D313031579C
x-oss-server-time: 9
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170311
expires: Thu, 17 Apr 2025 10:25:09 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59f6f1e929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/js/twilight/2.13.38/p-61858adc.system.js | 172.64.145.88 | 200 OK | 587 B |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-61858adc.system.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (610), with no line terminators Hash37f8fdad44c8e77791092c96ba4c3adf 088171f725cfa9be75432f7b8fb09dcf545db532 0f3c4604da420411fb58764546686dace0eed6d6cea8038ab8dbbf172e5b7ccc
GET /js/twilight/2.13.38/p-61858adc.system.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=636
content-md5: F2UDVGlawT1QYUN8TYn1sw==
etag: W/"17650354695AC13D5061437C4D89F5B3"
last-modified: Mon, 15 Apr 2024 10:52:32 GMT
x-oss-hash-crc64ecma: 16019268180728832470
x-oss-object-type: Normal
x-oss-request-id: 661D0A0B0BF17538372EBA08
x-oss-server-time: 2
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170084
expires: Thu, 17 Apr 2025 10:25:09 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59f0e25929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/js/twilight/2.13.38/p-7ff9dda0.system.entry.js | 172.64.145.88 | 200 OK | 10 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-7ff9dda0.system.entry.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/twilight/2.13.38/p-7ff9dda0.system.entry.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=10147
content-md5: ECbQYdRbZfjFJJFrkHi78w==
etag: W/"1026D061D45B65F8C524916B9078BBF3"
last-modified: Mon, 15 Apr 2024 10:52:34 GMT
x-oss-hash-crc64ecma: 14103877803952633017
x-oss-object-type: Normal
x-oss-request-id: 661D0A0DE477A23239916823
x-oss-server-time: 16
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170084
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59e1c3f929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.sa/customer_profiles/jCsuO9lERjDjLSQ1vOQLJz9mTBZYzv9eFRkyNEnz.jpg | 172.64.145.121 | 200 OK | 97 kB |
URL GET HTTP/3cdn.salla.sa/customer_profiles/jCsuO9lERjDjLSQ1vOQLJz9mTBZYzv9eFRkyNEnz.jpg IP172.64.145.121:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.sa Fingerprint04:17:BA:18:A2:D7:C1:7B:BE:E4:86:1A:C6:9E:D7:DC:1A:AA:FC:49 ValidityThu, 11 Apr 2024 23:12:41 GMT - Wed, 10 Jul 2024 23:12:40 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1024x768, Scaling: [none]x[none], YUV color, decoders should clamp Hash5bb06c11443d8184159b9b1ddccfc9d2 3c7aee37937cf486a97733c60c9e2adc2956c1e8 0f3a2726e558d600d16dd32b95dacaf8c85ac364be4a97588efe5c5d9e1a6606
GET /customer_profiles/jCsuO9lERjDjLSQ1vOQLJz9mTBZYzv9eFRkyNEnz.jpg HTTP/1.1
Host: cdn.salla.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: image/webp
content-length: 97196
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=561276
content-disposition: inline; filename="jCsuO9lERjDjLSQ1vOQLJz9mTBZYzv9eFRkyNEnz.webp"
etag: "8969288f4245120e7c3870287cce0ff3"
last-modified: Sat, 18 Nov 2023 12:27:24 GMT
vary: Accept
x-amz-id-2: w5/HFhohJE0xTMr1+k3pO1aao30D7djt2h5AMUVqvohcvsT8Nj7B+w8jmYFjCNF1EXlPWkINBOxoCWt7laOgvg==
x-amz-request-id: 9R9DW7W6EH8NFEYW
x-amz-server-side-encryption: AES256
x-amz-version-id: null
cf-cache-status: HIT
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875bb59e1f18929a-CPH
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/js/twilight/2.13.38/p-70434381.system.js | 172.64.145.88 | 200 OK | 1.2 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/p-70434381.system.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1189), with no line terminators Hash51d37dc3d41b00f69df784d2ab59cc95 29d9feb165415191d71b622581119d0f3119c592 a02289fc5a80ff002bf46d0ab672e024cf9a6f7d3b09b7e9d61ec21a30b98c06
GET /js/twilight/2.13.38/p-70434381.system.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=1215
content-md5: ZTaxHsnkdKYT/h3LL4RLMA==
etag: W/"6536B11EC9E474A613FE1DCB2F844B30"
last-modified: Mon, 15 Apr 2024 10:52:33 GMT
x-oss-hash-crc64ecma: 2126950348080336472
x-oss-object-type: Normal
x-oss-request-id: 661D0A0B473B933830EB2A0C
x-oss-server-time: 15
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170083
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59f0e2f929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| sc-static.net/scevent.min.js | 54.230.112.243 | 200 OK | 46 kB |
URL GET HTTP/2sc-static.net/scevent.min.js IP54.230.112.243:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerAmazon Subjectsc-static.net FingerprintE4:8A:DF:2D:95:33:E5:93:D4:43:8A:14:06:EA:EA:E8:AD:29:20:0F ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (27992) Hash264bae03f1d598bca141e0840046b194 721f3a0714d44e5cb641fc99ad12b955130a88e3 f563aec552103867adcb967e41b1699c9d15e1aa257c7a210f70f5cd71e6a0ef
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 19297
server: CloudFront
date: Wed, 17 Apr 2024 10:25:09 GMT
access-control-allow-headers: Content-Type
access-control-allow-origin: *
content-encoding: gzip
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=38b33afdb36f494aa03f175381ce5c1b;max-age=86400;expires=Thu, 18 Apr 2024 10:25:09 GMT;Path=/scevent.min.js;Secure;SameSite=None
x-cache: Miss from cloudfront
via: 1.1 9ba4efea4d7fc27f92a66f28df5d1152.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C1
x-amz-cf-id: 1Yp8HmTFrAJKMCscbzQlWmQDbpKdhF9Qlrjx0TUeuY3fW9x6FvT0qg==
X-Firefox-Spdy: h2
|
|
| cdn.assets.salla.network/themes/1247874246/1.139.0/app.js | 172.64.145.88 | 200 OK | 114 kB |
URL GET HTTP/3cdn.assets.salla.network/themes/1247874246/1.139.0/app.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
Size114 kB (114213 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /themes/1247874246/1.139.0/app.js HTTP/1.1
Host: cdn.assets.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
content-md5: gpY+jyRAr1EDQYm1Rs9FVg==
etag: W/"82963E8F2440AF51034189B546CF4556"
last-modified: Wed, 14 Feb 2024 09:23:13 GMT
x-oss-hash-crc64ecma: 9629519600419922129
x-oss-object-type: Normal
x-oss-request-id: 65F1EE17CA02BA3033E609E9
x-oss-server-time: 44
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 1994
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 875bb59a2ad5929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE | 104.21.78.86 | 403 Forbidden | 1.0 MB |
URL User Request GET HTTP/3hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE IP104.21.78.86:443
CertificateIssuerGoogle Trust Services LLC Subjecthajarwater.sa Fingerprint1B:77:C8:65:98:21:49:F4:C6:4B:DE:AE:3D:0D:D1:B1:51:E3:04:D3 ValidityTue, 26 Mar 2024 04:31:34 GMT - Mon, 24 Jun 2024 04:31:33 GMT
Size1.0 MB (1010296 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE HTTP/1.1
Host: hajarwater.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cf_chl_3=c5daf76a6115233; cf_chl_rc_m=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Wed, 17 Apr 2024 10:25:00 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: GnZuIVx67aUVFi97FB24MdeJHH53yGrZBkGBygD4SMzengZq7bNtZQczp8F+gi1wjXYRz7CI7N6dpMLrwNWrbLZk4pk5HajBc/LGKz3rQp4AFg8V6Cc1W8dX0icnF3llOIIC4JGul9Ny1ntkRwRM6w==$g/eioCoPTFTFNzRHiDq56w==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875bb5694a0c930b-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hajarwater.sa/cdn-cgi/rum? | 104.21.78.86 | 200 OK | 0 B |
URL POST HTTP/3hajarwater.sa/cdn-cgi/rum? IP104.21.78.86:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subjecthajarwater.sa Fingerprint1B:77:C8:65:98:21:49:F4:C6:4B:DE:AE:3D:0D:D1:B1:51:E3:04:D3 ValidityTue, 26 Mar 2024 04:31:34 GMT - Mon, 24 Jun 2024 04:31:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: hajarwater.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE
Content-Type: application/json
Content-Length: 395
Origin: https://hajarwater.sa
DNT: 1
Connection: keep-alive
Cookie: cf_chl_3=c5daf76a6115233; cf_chl_rc_m=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:00 GMT
server: cloudflare
cf-ray: 875bb569eb8e930b-CPH
x-frame-options: DENY
x-content-type-options: nosniff
|
|
| www.google.no/pagead/1p-conversion/10898475421/?random=1240353810&cv=11&fst=1713349509191&bg=ffffff&guid=ON&async=1>m=45be44f0v870793280z8811065323za201&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&ref=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE%26__cf_chl_tk%3D2utmKkM6ZBWJSDu3C2mYhYX8Y021GsDL23UXaMFCu6s-1713349500-0.0.1.1-1855&label=undefined&hn=www.google.com&frm=0&tiba=%D8%A7%D8%AD%D8%B5%D9%84%20%D8%B9%D9%84%D9%89%205%20%D9%83%D8%B1%D8%A7%D8%AA%D9%8A%D9%86%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7%D8%AC%D8%B1%20%D9%85%D8%AC%D8%A7%D9%86%D8%A7%20!%20-%20%D9%85%D8%AA%D8%AC%D8%B1%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7&value=199¤cy_code=SAR&npa=1&gclaw=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&pscdl=noapi&auid=1793049493.1713349509&fdr=SA&gcp=2&sscte=1&ct_cookie_present=1&fmt=3&ct_cookie_present=false&eoid=ClgKEQjw5v2wBhDZsPyojce1-eYBEkMAdwxEkZq6Jc-5C0PV8A_MQzMiClAgK5bv2Ei_oFCuTWw1MBx-7BISlQ7zx0HC9RCs9M5bMbm6phvQwPcCBwrLI0vE8P8HAQ&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQI&eitems=ChEI8Ob9sAYQ2YOUjrn2iOirARIdAKr2w19dCUan31mDgRL9mEGhFKjKEq_v_Yle3ZE&pscrd=IhMImLmmp4TJhQMVGlgeAh1uDQu_MioIAxoRCAQQqM_U-E0ogICZyfjHhQMaEQgFEKjP1PhNKICAmcn4x4UDKAAyYwgEElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgHWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjJjCAcSWwo3RUFJYUlRb2JDaE1JdkxIUDdZTEloUU1WeXprR0FCMnVCQUNDRUFBWUFTQUFFZ0pzNmZEX0J3RRgASAdYAGCSzp_mgsiFA2oJCAIQ2AEYJCAHcPiZixK4AQEyAggCMmMICBJbCjdFQUlhSVFvYkNoTUl2TEhQN1lMSWhRTVZ5emtHQUIydUJBQ0NFQUFZQVNBQUVnSnM2ZkRfQndFGABIB1gAYJLOn-aCyIUDagkIAhDYARgkIAdw-JmLErgBATICCAIyYwgJElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgHWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjJjCAoSWwo3RUFJYUlRb2JDaE1JdkxIUDdZTEloUU1WeXprR0FCMnVCQUNDRUFBWUFTQUFFZ0pzNmZEX0J3RRgASAdYAGCSzp_mgsiFA2oJCAIQ2AEYJCAHcPiZixK4AQEyAggCMmMIAhJbCjdFQUlhSVFvYkNoTUl2TEhQN1lMSWhRTVZ5emtHQUIydUJBQ0NFQUFZQVNBQUVnSnM2ZkRfQndFGABIB1gAYJLOn-aCyIUDagkIAhDYARgkIAdw-JmLErgBATICCAIyYwgLElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgEWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjoWaHR0cHM6Ly9oYWphcndhdGVyLnNhLw&ipr=y | 142.250.74.163 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/pagead/1p-conversion/10898475421/?random=1240353810&cv=11&fst=1713349509191&bg=ffffff&guid=ON&async=1>m=45be44f0v870793280z8811065323za201&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&ref=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE%26__cf_chl_tk%3D2utmKkM6ZBWJSDu3C2mYhYX8Y021GsDL23UXaMFCu6s-1713349500-0.0.1.1-1855&label=undefined&hn=www.google.com&frm=0&tiba=%D8%A7%D8%AD%D8%B5%D9%84%20%D8%B9%D9%84%D9%89%205%20%D9%83%D8%B1%D8%A7%D8%AA%D9%8A%D9%86%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7%D8%AC%D8%B1%20%D9%85%D8%AC%D8%A7%D9%86%D8%A7%20!%20-%20%D9%85%D8%AA%D8%AC%D8%B1%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7&value=199¤cy_code=SAR&npa=1&gclaw=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&pscdl=noapi&auid=1793049493.1713349509&fdr=SA&gcp=2&sscte=1&ct_cookie_present=1&fmt=3&ct_cookie_present=false&eoid=ClgKEQjw5v2wBhDZsPyojce1-eYBEkMAdwxEkZq6Jc-5C0PV8A_MQzMiClAgK5bv2Ei_oFCuTWw1MBx-7BISlQ7zx0HC9RCs9M5bMbm6phvQwPcCBwrLI0vE8P8HAQ&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQI&eitems=ChEI8Ob9sAYQ2YOUjrn2iOirARIdAKr2w19dCUan31mDgRL9mEGhFKjKEq_v_Yle3ZE&pscrd=IhMImLmmp4TJhQMVGlgeAh1uDQu_MioIAxoRCAQQqM_U-E0ogICZyfjHhQMaEQgFEKjP1PhNKICAmcn4x4UDKAAyYwgEElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgHWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjJjCAcSWwo3RUFJYUlRb2JDaE1JdkxIUDdZTEloUU1WeXprR0FCMnVCQUNDRUFBWUFTQUFFZ0pzNmZEX0J3RRgASAdYAGCSzp_mgsiFA2oJCAIQ2AEYJCAHcPiZixK4AQEyAggCMmMICBJbCjdFQUlhSVFvYkNoTUl2TEhQN1lMSWhRTVZ5emtHQUIydUJBQ0NFQUFZQVNBQUVnSnM2ZkRfQndFGABIB1gAYJLOn-aCyIUDagkIAhDYARgkIAdw-JmLErgBATICCAIyYwgJElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgHWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjJjCAoSWwo3RUFJYUlRb2JDaE1JdkxIUDdZTEloUU1WeXprR0FCMnVCQUNDRUFBWUFTQUFFZ0pzNmZEX0J3RRgASAdYAGCSzp_mgsiFA2oJCAIQ2AEYJCAHcPiZixK4AQEyAggCMmMIAhJbCjdFQUlhSVFvYkNoTUl2TEhQN1lMSWhRTVZ5emtHQUIydUJBQ0NFQUFZQVNBQUVnSnM2ZkRfQndFGABIB1gAYJLOn-aCyIUDagkIAhDYARgkIAdw-JmLErgBATICCAIyYwgLElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgEWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjoWaHR0cHM6Ly9oYWphcndhdGVyLnNhLw&ipr=y IP142.250.74.163:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subject*.google.no Fingerprint0E:DD:25:54:7B:C3:7F:EC:27:35:B1:EC:15:C4:B7:D2:09:71:3B:68 ValidityMon, 04 Mar 2024 07:26:33 GMT - Mon, 27 May 2024 07:26:32 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/10898475421/?random=1240353810&cv=11&fst=1713349509191&bg=ffffff&guid=ON&async=1>m=45be44f0v870793280z8811065323za201&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&ref=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE%26__cf_chl_tk%3D2utmKkM6ZBWJSDu3C2mYhYX8Y021GsDL23UXaMFCu6s-1713349500-0.0.1.1-1855&label=undefined&hn=www.google.com&frm=0&tiba=%D8%A7%D8%AD%D8%B5%D9%84%20%D8%B9%D9%84%D9%89%205%20%D9%83%D8%B1%D8%A7%D8%AA%D9%8A%D9%86%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7%D8%AC%D8%B1%20%D9%85%D8%AC%D8%A7%D9%86%D8%A7%20!%20-%20%D9%85%D8%AA%D8%AC%D8%B1%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7&value=199¤cy_code=SAR&npa=1&gclaw=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&pscdl=noapi&auid=1793049493.1713349509&fdr=SA&gcp=2&sscte=1&ct_cookie_present=1&fmt=3&ct_cookie_present=false&eoid=ClgKEQjw5v2wBhDZsPyojce1-eYBEkMAdwxEkZq6Jc-5C0PV8A_MQzMiClAgK5bv2Ei_oFCuTWw1MBx-7BISlQ7zx0HC9RCs9M5bMbm6phvQwPcCBwrLI0vE8P8HAQ&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQI&eitems=ChEI8Ob9sAYQ2YOUjrn2iOirARIdAKr2w19dCUan31mDgRL9mEGhFKjKEq_v_Yle3ZE&pscrd=IhMImLmmp4TJhQMVGlgeAh1uDQu_MioIAxoRCAQQqM_U-E0ogICZyfjHhQMaEQgFEKjP1PhNKICAmcn4x4UDKAAyYwgEElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgHWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjJjCAcSWwo3RUFJYUlRb2JDaE1JdkxIUDdZTEloUU1WeXprR0FCMnVCQUNDRUFBWUFTQUFFZ0pzNmZEX0J3RRgASAdYAGCSzp_mgsiFA2oJCAIQ2AEYJCAHcPiZixK4AQEyAggCMmMICBJbCjdFQUlhSVFvYkNoTUl2TEhQN1lMSWhRTVZ5emtHQUIydUJBQ0NFQUFZQVNBQUVnSnM2ZkRfQndFGABIB1gAYJLOn-aCyIUDagkIAhDYARgkIAdw-JmLErgBATICCAIyYwgJElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgHWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjJjCAoSWwo3RUFJYUlRb2JDaE1JdkxIUDdZTEloUU1WeXprR0FCMnVCQUNDRUFBWUFTQUFFZ0pzNmZEX0J3RRgASAdYAGCSzp_mgsiFA2oJCAIQ2AEYJCAHcPiZixK4AQEyAggCMmMIAhJbCjdFQUlhSVFvYkNoTUl2TEhQN1lMSWhRTVZ5emtHQUIydUJBQ0NFQUFZQVNBQUVnSnM2ZkRfQndFGABIB1gAYJLOn-aCyIUDagkIAhDYARgkIAdw-JmLErgBATICCAIyYwgLElsKN0VBSWFJUW9iQ2hNSXZMSFA3WUxJaFFNVnl6a0dBQjJ1QkFDQ0VBQVlBU0FBRWdKczZmRF9Cd0UYAEgEWABgks6f5oLIhQNqCQgCENgBGCQgB3D4mYsSuAEBMgIIAjoWaHR0cHM6Ly9oYWphcndhdGVyLnNhLw&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 17 Apr 2024 10:25:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| hajarwater.sa/cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js | 104.21.78.86 | 200 OK | 7.9 kB |
URL GET HTTP/3hajarwater.sa/cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js IP104.21.78.86:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subjecthajarwater.sa Fingerprint1B:77:C8:65:98:21:49:F4:C6:4B:DE:AE:3D:0D:D1:B1:51:E3:04:D3 ValidityTue, 26 Mar 2024 04:31:34 GMT - Mon, 24 Jun 2024 04:31:33 GMT
File typeJavaScript source, ASCII text, with very long lines (7894), with no line terminators Hashd12f82ff187523fc274e6de35a1c95fc 3f70f874a018d029646cea4bc587ddc462339efb 2d7a002244730d92e92493dcc0ab1e947f5b27f56b9bb37afe209e7766894c49
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js HTTP/1.1
Host: hajarwater.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cf_chl_3=e98ccaa0860808c; cf_chl_rc_m=1; cf_clearance=2IyeimokqewkoR2JxNcxjlfuabUTmyUiiflkL3pPuO4-1713349500-1.0.1.1-jBrykk53kL5yTXsdzVLN7diYUxh9KLiUyZDXIZhF0.ImcL87CN4X1ukufMPhLHAmVPTFTyx2RljLlbr6tRjxYA; XSRF-TOKEN=eyJpdiI6IkFmWjBFdFlaWnFyV0pOdzh4K3FFN2c9PSIsInZhbHVlIjoiT1NBR0RkOGhQZ1UvT2w5YmtKUUE1MUliNDVtZTNCNEVrelJSMWlwVnFKT0ZYakVFUEpDSHdYT05zcXdRWXpxYWJGOGFzRldvVjJMRTE5b0xoWkN6dC9MRWEwZ1VXNGlSK0oyTGIwRkc0NmFnM3FUL1dvTG5jTFdDZXBSUEJqSm0iLCJtYWMiOiI5MzE4ZjA3MzY3MDNjNGViNjNlZGVmYjFiM2NjOThiMDM2ZjhjYzc3M2NiMTBmOTljMWYwZTM0OWEzMTBjZWQ1IiwidGFnIjoiIn0%3D; __said=wcfQpGrGJefRxZD3JrW7QGqB70NnTViRCInjSJnk; __cflb=0H28ummakHfPRjxk2XCNRi63AZbK2NeNSRfHu2VeBCF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: application/javascript; charset=UTF-8
vary: accept-encoding
content-encoding: br
x-content-type-options: nosniff
cache-control: max-age=14400, public
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 875bb59a9bc2930b-CPH
alt-svc: h3=":443"; ma=86400
|
|
| hajarwater.sa/cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js | 104.21.78.86 | 200 OK | 7.9 kB |
URL GET HTTP/3hajarwater.sa/cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js IP104.21.78.86:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subjecthajarwater.sa Fingerprint1B:77:C8:65:98:21:49:F4:C6:4B:DE:AE:3D:0D:D1:B1:51:E3:04:D3 ValidityTue, 26 Mar 2024 04:31:34 GMT - Mon, 24 Jun 2024 04:31:33 GMT
File typeJavaScript source, ASCII text, with very long lines (7893), with no line terminators Hash1d772235aa020f7a86a63606ad12c0a8 f13f053ef513d44c2e06811437eabaf6c1d1821e aa58d8c1dca594296b93da66787e09f43421b40e6c4af48ef76552e3d5d05d60
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js HTTP/1.1
Host: hajarwater.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cf_chl_3=e98ccaa0860808c; cf_chl_rc_m=1; cf_clearance=y6dX.mBlYIyeMFhNa_6sMVW5dkHVtxKfbFtKmh.BemE-1713349508-1.0.1.1-cGasae28p2T9HRlx_2ThYlAxv1M_XF_l2fJ2oA9ODdpd8O9pDYJB6bNZ.rVffM6pzuNVJKA8_B7rdP5ZnSvj.A; XSRF-TOKEN=eyJpdiI6ImhncHo4UFJrL0lud0tGV0h3clBDN1E9PSIsInZhbHVlIjoia1RsRnNpeVlHdmZpQzVRMzBwZXM1WlNJUEptNE1lQWFZZVNNRE9tdEtvMXVnaTNveWpaR2h3dTkyU2hSc1A4eE51TDByUnNURHAwU3V4RUdPUGt0VG5sejBXS3lSWmFaVHVZZkJXZGpIb3ZsUWplbVpUeDFTaGJaSVlBQjloa1QiLCJtYWMiOiJkZTljNGY3ZTVlN2I5ODg0Nzk0MjYyYmJlMDdmOGExMmY2ZDY4MGYyZjExNmFmOWM0NWRlOTBkNzY2NGFkMzIwIiwidGFnIjoiIn0%3D; __said=wcfQpGrGJefRxZD3JrW7QGqB70NnTViRCInjSJnk; __cflb=0H28ummakHfPRjxk2XCNRi63AZbK2NeNSRfHu2VeBCF; _gcl_aw=GCL.1713349509.EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE; _gcl_au=1.1.1793049493.1713349509; _scid=3c500bfd-40a9-49bd-9650-665bc2b8da65; _scid_r=3c500bfd-40a9-49bd-9650-665bc2b8da65
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: application/javascript; charset=UTF-8
vary: accept-encoding
x-content-type-options: nosniff
content-encoding: br
cache-control: max-age=14400, public
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 875bb5a10a7c930b-CPH
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.sa/bqEja/qjLBhmWbGrKOHYQ8Wbt0DHEwS09fclLWrqCk1dHO.jpg | 172.64.145.121 | 200 OK | 13 kB |
URL GET HTTP/3cdn.salla.sa/bqEja/qjLBhmWbGrKOHYQ8Wbt0DHEwS09fclLWrqCk1dHO.jpg IP172.64.145.121:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.sa Fingerprint04:17:BA:18:A2:D7:C1:7B:BE:E4:86:1A:C6:9E:D7:DC:1A:AA:FC:49 ValidityThu, 11 Apr 2024 23:12:41 GMT - Wed, 10 Jul 2024 23:12:40 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp Hash7c2fde9da5134d55d6e1add4d6dd4ba7 20ff2c04f0775cbe77c4951131b098e528a3c7a3 de8179c3f655e953d104dcd280148ab6aa0e93e4abd2203d87efbfdfe4ff46ad
GET /bqEja/qjLBhmWbGrKOHYQ8Wbt0DHEwS09fclLWrqCk1dHO.jpg HTTP/1.1
Host: cdn.salla.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: image/webp
content-length: 12626
cache-control: public, max-age=31536000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=30787
content-disposition: inline; filename="qjLBhmWbGrKOHYQ8Wbt0DHEwS09fclLWrqCk1dHO.webp"
etag: "9441509fe7656321c56e7bb162747dc4"
last-modified: Sun, 21 Jan 2024 07:12:23 GMT
vary: Accept
x-amz-id-2: TRAi3nOzbNEKW+rh3CyTwOPGV5wbqQmHFys5apX589qftKi/lvN0Fet8rW4D1aY2UeQpsl7IL20=
x-amz-request-id: SZZ3H48Y66W1JAAK
x-amz-server-side-encryption: AES256
x-amz-version-id: null
cf-cache-status: HIT
expires: Thu, 17 Apr 2025 10:25:08 GMT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875bb59bea05929a-CPH
alt-svc: h3=":443"; ma=86400
|
|
| hajarwater.sa/cdn-cgi/challenge-platform/h/b/jsd/r/875bb5928960930b | 104.21.78.86 | 200 OK | 0 B |
URL POST HTTP/3hajarwater.sa/cdn-cgi/challenge-platform/h/b/jsd/r/875bb5928960930b IP104.21.78.86:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subjecthajarwater.sa Fingerprint1B:77:C8:65:98:21:49:F4:C6:4B:DE:AE:3D:0D:D1:B1:51:E3:04:D3 ValidityTue, 26 Mar 2024 04:31:34 GMT - Mon, 24 Jun 2024 04:31:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/875bb5928960930b HTTP/1.1
Host: hajarwater.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12317
Origin: https://hajarwater.sa
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE
Cookie: cf_chl_3=e98ccaa0860808c; cf_chl_rc_m=1; cf_clearance=y6dX.mBlYIyeMFhNa_6sMVW5dkHVtxKfbFtKmh.BemE-1713349508-1.0.1.1-cGasae28p2T9HRlx_2ThYlAxv1M_XF_l2fJ2oA9ODdpd8O9pDYJB6bNZ.rVffM6pzuNVJKA8_B7rdP5ZnSvj.A; XSRF-TOKEN=eyJpdiI6ImhncHo4UFJrL0lud0tGV0h3clBDN1E9PSIsInZhbHVlIjoia1RsRnNpeVlHdmZpQzVRMzBwZXM1WlNJUEptNE1lQWFZZVNNRE9tdEtvMXVnaTNveWpaR2h3dTkyU2hSc1A4eE51TDByUnNURHAwU3V4RUdPUGt0VG5sejBXS3lSWmFaVHVZZkJXZGpIb3ZsUWplbVpUeDFTaGJaSVlBQjloa1QiLCJtYWMiOiJkZTljNGY3ZTVlN2I5ODg0Nzk0MjYyYmJlMDdmOGExMmY2ZDY4MGYyZjExNmFmOWM0NWRlOTBkNzY2NGFkMzIwIiwidGFnIjoiIn0%3D; __said=wcfQpGrGJefRxZD3JrW7QGqB70NnTViRCInjSJnk; __cflb=0H28ummakHfPRjxk2XCNRi63AZbK2NeNSRfHu2VeBCF; _gcl_aw=GCL.1713349509.EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE; _gcl_au=1.1.1793049493.1713349509; _scid=3c500bfd-40a9-49bd-9650-665bc2b8da65; _scid_r=3c500bfd-40a9-49bd-9650-665bc2b8da65; fresh_summary=1; __ssid=9151eedd55767c70533019ec48ea07c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=dZ6YDQz6kzfSgBpcQtxFmX3.6d4wwM0lkS.6I7w3ZTg-1713349509-1.0.1.1-MGmbPCRNFAo9r3SeRtIpFPFpgs0rOBEDxMS16kz2xreMy4OxJbtQh5Gc1vDqaF1hdyn3_FPAP4vmXRSYm_d_lg; path=/; expires=Thu, 17-Apr-25 10:25:09 GMT; domain=.hajarwater.sa; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875bb5a4297b930b-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/js/twilight/2.13.38/twilight.js | 172.64.145.88 | 200 OK | 118 kB |
URL GET HTTP/3cdn.salla.network/js/twilight/2.13.38/twilight.js IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
Size118 kB (117969 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/twilight/2.13.38/twilight.js HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=119608
content-md5: NkZH4sj+gA7CiNv7UDIEfA==
etag: W/"364647E2C8FE800EC288DBFB5032047C"
last-modified: Mon, 15 Apr 2024 10:52:42 GMT
x-oss-hash-crc64ecma: 9332007965415789814
x-oss-object-type: Normal
x-oss-request-id: 661D0A0A601F62363708404C
x-oss-server-time: 55
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 170086
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bb59a2ae4929d-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hajarwater.sa/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js | 104.21.78.86 | 200 OK | 12 kB |
URL GET HTTP/3hajarwater.sa/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP104.21.78.86:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subjecthajarwater.sa Fingerprint1B:77:C8:65:98:21:49:F4:C6:4B:DE:AE:3D:0D:D1:B1:51:E3:04:D3 ValidityTue, 26 Mar 2024 04:31:34 GMT - Mon, 24 Jun 2024 04:31:33 GMT
File typeJavaScript source, ASCII text, with very long lines (12331) Hash88a769d2fe35899fd45a332a0a032cc0 514c6c1d8475d17e412849a4c90159517d0fa10a ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: hajarwater.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE
DNT: 1
Connection: keep-alive
Cookie: cf_chl_3=e98ccaa0860808c; cf_chl_rc_m=1; cf_clearance=2IyeimokqewkoR2JxNcxjlfuabUTmyUiiflkL3pPuO4-1713349500-1.0.1.1-jBrykk53kL5yTXsdzVLN7diYUxh9KLiUyZDXIZhF0.ImcL87CN4X1ukufMPhLHAmVPTFTyx2RljLlbr6tRjxYA; XSRF-TOKEN=eyJpdiI6IkFmWjBFdFlaWnFyV0pOdzh4K3FFN2c9PSIsInZhbHVlIjoiT1NBR0RkOGhQZ1UvT2w5YmtKUUE1MUliNDVtZTNCNEVrelJSMWlwVnFKT0ZYakVFUEpDSHdYT05zcXdRWXpxYWJGOGFzRldvVjJMRTE5b0xoWkN6dC9MRWEwZ1VXNGlSK0oyTGIwRkc0NmFnM3FUL1dvTG5jTFdDZXBSUEJqSm0iLCJtYWMiOiI5MzE4ZjA3MzY3MDNjNGViNjNlZGVmYjFiM2NjOThiMDM2ZjhjYzc3M2NiMTBmOTljMWYwZTM0OWEzMTBjZWQ1IiwidGFnIjoiIn0%3D; __said=wcfQpGrGJefRxZD3JrW7QGqB70NnTViRCInjSJnk; __cflb=0H28ummakHfPRjxk2XCNRi63AZbK2NeNSRfHu2VeBCF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:07 GMT
content-type: application/javascript
last-modified: Mon, 15 Apr 2024 08:31:34 GMT
etag: W/"661ce5e6-302c"
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875bb5977d14930b-CPH
x-frame-options: DENY
expires: Fri, 19 Apr 2024 10:25:07 GMT
cache-control: max-age=172800, public
content-encoding: gzip
|
|
| static.addtoany.com/menu/modules/core.BRQnzO8v.js | 104.22.70.197 | 200 OK | 72 kB |
URL GET HTTP/2static.addtoany.com/menu/modules/core.BRQnzO8v.js IP104.22.70.197:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectstatic.addtoany.com Fingerprint25:DC:52:06:E9:84:6F:BC:CB:DD:82:F7:D3:4C:8F:F5:9F:49:7E:DD ValiditySat, 24 Feb 2024 06:33:02 GMT - Fri, 24 May 2024 06:33:01 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash629401c31553d2f42a6ca46e58c2a97b 0ab6084caa72f90913c7e4119f491838726ec5c2 91b9b24f0aa59668e4d0a770ee7a294b9baa361a76a20ade8128cd0482a5d805
GET /menu/modules/core.BRQnzO8v.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hajarwater.sa
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=315360000, immutable
cf-bgj: minify
etag: W/"25da5432b1057724b8210f17e9b9db05"
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EwVoLJx7MHtGzuQiig1EenjjtwMnbA5D2w8uys2CcqMASvi26lrgYeO7nvU5a%2Bc%2FxkCQQ7Fw3WnBYdyS7j9ahnjqIiKoCasI6otbgCeJeYsZe58Wm2cJM%2BigIgrkE2K0LOBE5kF%2Fw7fAimK%2BkJRbbaCa"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 875bb5a2cf2a92a0-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lavana.sa/assets/360-tool/script.js?ver=1.0.5 | 0.0.0.0 | | 0 B |
URL GET lavana.sa/assets/360-tool/script.js?ver=1.0.5 IP0.0.0.0:0
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/360-tool/script.js?ver=1.0.5 HTTP/1.1
Host: lavana.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| karzoun.app/assets/uploads/karzoun/Widget.js | 172.67.148.19 | 200 OK | 13 kB |
URL GET HTTP/2karzoun.app/assets/uploads/karzoun/Widget.js IP172.67.148.19:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subjectkarzoun.app FingerprintD8:2C:A3:89:7A:28:66:12:11:28:6F:13:D6:2D:31:1B:63:2B:96:41 ValiditySun, 07 Apr 2024 05:22:24 GMT - Sat, 06 Jul 2024 05:22:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/uploads/karzoun/Widget.js HTTP/1.1
Host: karzoun.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: application/javascript
last-modified: Sun, 11 Feb 2024 16:19:49 GMT
vary: Accept-Encoding
etag: W/"65c8f3a5-341a"
expires: Wed, 17 Apr 2024 10:26:00 GMT
cache-control: max-age=14400
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 1594
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S1y8J6Cl3fV1yu%2F%2FnDTaHPbOHhWpr6w%2FO5xIEmPmOAVnLfZz9kDVMRFuflI0aOiV2QUWjbRSkJdRw7KcyoBESSxBSYengYOKQkyx0skRpMIPNcUo5OfxgLK9KDKhJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875bb5a06f3292eb-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| hajarwater.sa/cdn-cgi/rum? | 104.21.78.86 | 204 No Content | 0 B |
URL POST HTTP/3hajarwater.sa/cdn-cgi/rum? IP104.21.78.86:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subjecthajarwater.sa Fingerprint1B:77:C8:65:98:21:49:F4:C6:4B:DE:AE:3D:0D:D1:B1:51:E3:04:D3 ValidityTue, 26 Mar 2024 04:31:34 GMT - Mon, 24 Jun 2024 04:31:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: hajarwater.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE
content-type: application/json
Content-Length: 13351
Origin: https://hajarwater.sa
DNT: 1
Connection: keep-alive
Cookie: cf_chl_3=e98ccaa0860808c; cf_chl_rc_m=1; cf_clearance=y6dX.mBlYIyeMFhNa_6sMVW5dkHVtxKfbFtKmh.BemE-1713349508-1.0.1.1-cGasae28p2T9HRlx_2ThYlAxv1M_XF_l2fJ2oA9ODdpd8O9pDYJB6bNZ.rVffM6pzuNVJKA8_B7rdP5ZnSvj.A; XSRF-TOKEN=eyJpdiI6ImhncHo4UFJrL0lud0tGV0h3clBDN1E9PSIsInZhbHVlIjoia1RsRnNpeVlHdmZpQzVRMzBwZXM1WlNJUEptNE1lQWFZZVNNRE9tdEtvMXVnaTNveWpaR2h3dTkyU2hSc1A4eE51TDByUnNURHAwU3V4RUdPUGt0VG5sejBXS3lSWmFaVHVZZkJXZGpIb3ZsUWplbVpUeDFTaGJaSVlBQjloa1QiLCJtYWMiOiJkZTljNGY3ZTVlN2I5ODg0Nzk0MjYyYmJlMDdmOGExMmY2ZDY4MGYyZjExNmFmOWM0NWRlOTBkNzY2NGFkMzIwIiwidGFnIjoiIn0%3D; __said=wcfQpGrGJefRxZD3JrW7QGqB70NnTViRCInjSJnk; __cflb=0H28ummakHfPRjxk2XCNRi63AZbK2NeNSRfHu2VeBCF; _gcl_aw=GCL.1713349509.EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE; _gcl_au=1.1.1793049493.1713349509; _scid=3c500bfd-40a9-49bd-9650-665bc2b8da65; _scid_r=3c500bfd-40a9-49bd-9650-665bc2b8da65
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
date: Wed, 17 Apr 2024 10:25:09 GMT
access-control-allow-origin: https://hajarwater.sa
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 875bb5a0fa51930b-CPH
x-frame-options: DENY
x-content-type-options: nosniff
|
|
| www.googletagmanager.com/gtag/destination?id=AW-10898475421&l=dataLayer&cx=c | 142.250.147.97 | 200 OK | 330 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-10898475421&l=dataLayer&cx=c IP142.250.147.97:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (7746) Size330 kB (329942 bytes) Hashae113837cdbce601ebbb139a3862909c 00e7313c57a6469891b4c2620aab9893fef376d3 964bb6f761bd9790bb11a2e5c38a2a9f97fde510dfff44cdcfcbc758ca4594af
GET /gtag/destination?id=AW-10898475421&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 10:25:08 GMT
expires: Wed, 17 Apr 2024 10:25:08 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 109249
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/pagead/landing?gcd=13l3l3l2l1&dma_cps=sypham&dma=1&npa=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE>m=45He44f0n81TGFC6FVv811065323za200&auid=1793049493.1713349509 | 142.250.74.164 | 200 OK | 42 B |
URL POST HTTP/2www.google.com/pagead/landing?gcd=13l3l3l2l1&dma_cps=sypham&dma=1&npa=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE>m=45He44f0n81TGFC6FVv811065323za200&auid=1793049493.1713349509 IP142.250.74.164:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCC:CC:99:46:65:6C:77:0B:C8:AA:AD:5E:58:B6:2D:19:B2:C7:0B:06 ValidityMon, 04 Mar 2024 07:19:07 GMT - Mon, 27 May 2024 07:19:06 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcd=13l3l3l2l1&dma_cps=sypham&dma=1&npa=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE>m=45He44f0n81TGFC6FVv811065323za200&auid=1793049493.1713349509 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hajarwater.sa
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 17 Apr 2024 10:25:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/pagead/1p-conversion/10898475421/?random=1713349509191&cv=11&fst=1713349509191&bg=ffffff&guid=ON&async=1>m=45be44f0v870793280z8811065323za201&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&ref=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE%26__cf_chl_tk%3D2utmKkM6ZBWJSDu3C2mYhYX8Y021GsDL23UXaMFCu6s-1713349500-0.0.1.1-1855&label=undefined&hn=www.google.com&frm=0&tiba=%D8%A7%D8%AD%D8%B5%D9%84%20%D8%B9%D9%84%D9%89%205%20%D9%83%D8%B1%D8%A7%D8%AA%D9%8A%D9%86%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7%D8%AC%D8%B1%20%D9%85%D8%AC%D8%A7%D9%86%D8%A7%20!%20-%20%D9%85%D8%AA%D8%AC%D8%B1%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7&oid=44aece82309d5efdb7fac961853aa970db44f3d1&value=199¤cy_code=SAR&bttype=purchase&npa=1&gclaw=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&pscdl=noapi&auid=1793049493.1713349509&fdr=SA&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 | 142.250.74.164 | 200 OK | 4.4 kB |
URL GET HTTP/3www.google.com/pagead/1p-conversion/10898475421/?random=1713349509191&cv=11&fst=1713349509191&bg=ffffff&guid=ON&async=1>m=45be44f0v870793280z8811065323za201&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&ref=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE%26__cf_chl_tk%3D2utmKkM6ZBWJSDu3C2mYhYX8Y021GsDL23UXaMFCu6s-1713349500-0.0.1.1-1855&label=undefined&hn=www.google.com&frm=0&tiba=%D8%A7%D8%AD%D8%B5%D9%84%20%D8%B9%D9%84%D9%89%205%20%D9%83%D8%B1%D8%A7%D8%AA%D9%8A%D9%86%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7%D8%AC%D8%B1%20%D9%85%D8%AC%D8%A7%D9%86%D8%A7%20!%20-%20%D9%85%D8%AA%D8%AC%D8%B1%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7&oid=44aece82309d5efdb7fac961853aa970db44f3d1&value=199¤cy_code=SAR&bttype=purchase&npa=1&gclaw=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&pscdl=noapi&auid=1793049493.1713349509&fdr=SA&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 IP142.250.74.164:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (4481), with no line terminators Hash2fae96a6d32ff1767fadfbe5e19d8ffa 712b6ebc310903c2edf4ee2954830e1b771b38ae a3b393d0f1a8612b18a70838ec7713ea8c1bf6cf363e5b766a0c06a42112441c
GET /pagead/1p-conversion/10898475421/?random=1713349509191&cv=11&fst=1713349509191&bg=ffffff&guid=ON&async=1>m=45be44f0v870793280z8811065323za201&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&ref=https%3A%2F%2Fhajarwater.sa%2Far%2FBuy10boxesGet5free%2Fp2093084701%3Fgad_source%3D1%26gclid%3DEAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE%26__cf_chl_tk%3D2utmKkM6ZBWJSDu3C2mYhYX8Y021GsDL23UXaMFCu6s-1713349500-0.0.1.1-1855&label=undefined&hn=www.google.com&frm=0&tiba=%D8%A7%D8%AD%D8%B5%D9%84%20%D8%B9%D9%84%D9%89%205%20%D9%83%D8%B1%D8%A7%D8%AA%D9%8A%D9%86%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7%D8%AC%D8%B1%20%D9%85%D8%AC%D8%A7%D9%86%D8%A7%20!%20-%20%D9%85%D8%AA%D8%AC%D8%B1%20%D9%85%D9%8A%D8%A7%D9%87%20%D9%87%D8%A7&oid=44aece82309d5efdb7fac961853aa970db44f3d1&value=199¤cy_code=SAR&bttype=purchase&npa=1&gclaw=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE&pscdl=noapi&auid=1793049493.1713349509&fdr=SA&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 17 Apr 2024 10:25:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 2300
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdn.salla.sa/bqEja/q1m8UTCfJDEmMEVpkK48G35wKmtpy0zBnbBesa6c.jpeg | 172.64.145.121 | 200 OK | 13 kB |
URL GET HTTP/3cdn.salla.sa/bqEja/q1m8UTCfJDEmMEVpkK48G35wKmtpy0zBnbBesa6c.jpeg IP172.64.145.121:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.sa Fingerprint04:17:BA:18:A2:D7:C1:7B:BE:E4:86:1A:C6:9E:D7:DC:1A:AA:FC:49 ValidityThu, 11 Apr 2024 23:12:41 GMT - Wed, 10 Jul 2024 23:12:40 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 512x449, Scaling: [none]x[none], YUV color, decoders should clamp Hash8512f169970b801f37ef1adfc9a0e863 6fb7a3fa9cb144fd520c8ef6dff1e6d54cf4619c 2f1dab166ccb0d991c8fbc3f5e7339b313be51f51555ade1677528746f0fe923
GET /bqEja/q1m8UTCfJDEmMEVpkK48G35wKmtpy0zBnbBesa6c.jpeg HTTP/1.1
Host: cdn.salla.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:08 GMT
content-type: image/webp
content-length: 12646
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=23700
content-disposition: inline; filename="q1m8UTCfJDEmMEVpkK48G35wKmtpy0zBnbBesa6c.webp"
etag: "af0a883d22efa8b5c235924a9cd0777b"
last-modified: Sun, 15 Nov 2020 07:40:59 GMT
vary: Accept
x-amz-id-2: xhed3ssk4kp6vryMXZh9xJMXGAdj3ZMHrgKG7FVGMX9S3+30dbLGiagC7lH3rLoMFO13eRWkjzN9OGUbz8bUcw==
x-amz-request-id: FJJKMQ6ZDADPTQ2K
x-amz-version-id: XeXPayz1vl3CkRjcw5Zs__zaFT__pmly
cf-cache-status: HIT
expires: Thu, 17 Apr 2025 10:25:08 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875bb59bea0a929a-CPH
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/images/flags.png | 172.64.145.88 | 200 OK | 24 kB |
URL GET HTTP/3cdn.salla.network/images/flags.png IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typePNG image data, 5652 x 15, 8-bit colormap, non-interlaced Hash972925f59d31d286a9fa3344e9abb41e ffe927f23d13dc8a19c31c71681af09746f9f249 a417a3ba4e54f2d7dee2a3460e53c709225610b3d0380c8d34bfeb428fdb9f77
GET /images/flags.png HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 10:25:09 GMT
content-type: image/webp
content-length: 24403
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=70857
content-disposition: inline; filename="flags.webp"
content-md5: QWJQ9g14Wi4C8X4FTS5ORA==
etag: "416250F60D785A2E02F17E054D2E4E44"
last-modified: Sun, 26 Feb 2023 15:21:01 GMT
vary: Accept
x-oss-hash-crc64ecma: 3720420707071309260
x-oss-object-type: Normal
x-oss-request-id: 659741CB0BF1753932991EA6
x-oss-server-time: 68
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 8901179
expires: Thu, 17 Apr 2025 10:25:09 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
server: cloudflare
cf-ray: 875bb5a1fd55929d-CPH
alt-svc: h3=":443"; ma=86400
|
|
| cdn.salla.network/fonts/default.css?v=2.0.3 | 172.64.145.88 | 200 OK | 1.3 kB |
URL GET HTTP/2cdn.salla.network/fonts/default.css?v=2.0.3 IP172.64.145.88:443
Requested byhttps://hajarwater.sa/ar/Buy10boxesGet5free/p2093084701?gad_source=1&gclid=EAIaIQobChMIvLHP7YLIhQMVyzkGAB2uBACCEAAYASAAEgJs6fD_BwE CertificateIssuerLet's Encrypt Subjectsalla.network Fingerprint9F:D4:F2:0B:F6:EC:17:9E:45:27:98:98:62:5A:6D:76:F8:25:8C:74 ValiditySat, 13 Apr 2024 23:15:43 GMT - Fri, 12 Jul 2024 23:15:42 GMT
File typeASCII text, with very long lines (1316), with no line terminators Hasha917ece473accee1c908989aa9b72229 0c12da5e8d8c0cf7adef83d8de22f3cce8d411b1 4ce09cb46e1ce7b118380ef3e1139f8f63740af64b2c2c829a5802bf9a31e498
GET /fonts/default.css?v=2.0.3 HTTP/1.1
Host: cdn.salla.network
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hajarwater.sa/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 10:25:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1305
content-md5: FL5xtXutSOtQbQaLQj6UMQ==
last-modified: Sun, 26 Feb 2023 15:20:56 GMT
vary: Accept-Encoding
x-oss-hash-crc64ecma: 6965165588111879542
x-oss-object-type: Normal
x-oss-request-id: 65683AC48FF6FF30393198AD
x-oss-server-time: 60
x-oss-storage-class: Standard
cf-cache-status: HIT
age: 3451980
expires: Thu, 17 Apr 2025 10:25:07 GMT
cache-control: public, max-age=31536000
server: cloudflare
cf-ray: 875bb5981826abde-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
0.0.0.0